patch-1
Dhiyaneshwaran 2023-01-16 23:18:47 +05:30 committed by GitHub
parent 66c39d5d07
commit f2714b2ac3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 3 additions and 7 deletions

View File

@ -21,23 +21,19 @@ requests:
- "{{BaseURL}}/{{rand_base(4)}}<br><br>please%20authenticate<br><br>.childrenlist.html"
stop-at-first-match: true
matchers-condition: or
matchers-condition: and
matchers:
- type: word
part: body
name: xss
words:
- '<img src="x" data onerror="alert(domain)"/>'
- 'data-coral-columnview-id'
condition: and
- '<br /><br />please authenticate<br /><br />'
condition: or
- type: word
part: body
name: html_injection
words:
- '<br /><br />please authenticate<br /><br />'
- 'data-coral-columnview-id'
condition: and
- type: word
part: content_type