Update cache-poisoning.yaml

patch-1
Prince Chaddha 2022-03-17 16:49:43 +05:30 committed by GitHub
parent 14f5d76a0f
commit fd3a1efd51
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 4 deletions

View File

@ -2,8 +2,8 @@ id: cache-poisoning
info:
name: Cache Poisoning
author: melbadry9,xelkomy
severity: info
author: melbadry9,xelkomy,akincibor
severity: low
reference:
- https://blog.melbadry9.xyz/fuzzing/nuclei-cache-poisoning
- https://portswigger.net/research/practical-web-cache-poisoning
@ -12,13 +12,13 @@ info:
requests:
- raw:
- |
GET /?mel=9 HTTP/1.1
GET /?{{randstr}}=9 HTTP/1.1
X-Forwarded-Prefix: cache.example.com
X-Forwarded-Host: cache.example.com
X-Forwarded-For: cache.example.com
- |
GET /?mel=9 HTTP/1.1
GET /?{{randstr}}=9 HTTP/1.1
req-condition: true
matchers: