Update metadata-alibaba.yaml

2024-10-10 15:27:07 +08:00 · 2024-10-10 15:27:07 +08:00 · e60d68673a
parent fe48dbae7d
commit e60d68673a
1 changed files with 5 additions and 2 deletions
--- a/http/misconfiguration/proxy/metadata-alibaba.yaml
+++ b/http/misconfiguration/proxy/metadata-alibaba.yaml
@ -22,7 +22,7 @@ info:
    cvss-score: 9.3
    cwe-id: CWE-441
  metadata:
-    max-request: 2
+    max-request: 4
  tags: exposure,config,alibaba,proxy,misconfig,metadata

 http:
@ -38,11 +38,14 @@ http:
      path:
        - dynamic/instance-identity/document
        - 2016-01-01/dynamic/instance-identity/document
+    attack: clusterbomb
+
    unsafe: true
    matchers:
      - type: word
        part: body
        words:
          - '","serial-number":"'
-
+          - '"zone-id":"'
+        condition: and
 # digest: 490a004630440220495fde6b8e524846446e53dead7f589f22c254d0ca7b6e09e07210469773749f0220264d2180b4589c8663f68bab544d951ad739fae7f3b6dccaaacee29718cb4778:922c64590222798bb761d5b6d8e72950