Update metadata-alibaba.yaml

2024-10-10 15:21:38 +08:00 · 2024-10-10 15:21:38 +08:00 · fe48dbae7d
parent 1b73e51dd9
commit fe48dbae7d
1 changed files with 5 additions and 2 deletions
--- a/http/misconfiguration/proxy/metadata-alibaba.yaml
+++ b/http/misconfiguration/proxy/metadata-alibaba.yaml
@ -28,18 +28,21 @@ info:
 http:
  - raw:
      - |+
-        GET http://{{hostval}}/dynamic/instance-identity/document HTTP/1.1
+        GET http://{{hostval}}/{{path}} HTTP/1.1
        Host: {{hostval}}

    payloads:
      hostval:
        - alibaba.oast.pro
        - 100.100.100.200
+      path:
+        - dynamic/instance-identity/document
+        - 2016-01-01/dynamic/instance-identity/document
    unsafe: true
    matchers:
      - type: word
        part: body
        words:
-          - "zone-id"
+          - '","serial-number":"'

 # digest: 490a004630440220495fde6b8e524846446e53dead7f589f22c254d0ca7b6e09e07210469773749f0220264d2180b4589c8663f68bab544d951ad739fae7f3b6dccaaacee29718cb4778:922c64590222798bb761d5b6d8e72950