Added TLS SNI Proxy Detection (#6729)
parent
cbcec3f1eb
commit
eb535defd5
|
@ -0,0 +1,23 @@
|
|||
id: tls-sni-proxy
|
||||
|
||||
info:
|
||||
name: TLS SNI Proxy Detection
|
||||
author: pdteam
|
||||
severity: info
|
||||
reference:
|
||||
- https://www.invicti.com/blog/web-security/ssrf-vulnerabilities-caused-by-sni-proxy-misconfigurations/
|
||||
- https://www.bamsoftware.com/computers/sniproxy/
|
||||
tags: ssrf,oast,tls,sni,proxy
|
||||
|
||||
requests:
|
||||
- raw:
|
||||
- |
|
||||
@tls-sni: interactsh-url
|
||||
GET HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
|
||||
matchers:
|
||||
- type: word
|
||||
part: interactsh_protocol # Confirms the DNS Interaction
|
||||
words:
|
||||
- "dns"
|
Loading…
Reference in New Issue