diff --git a/http/misconfiguration/proxy/metadata-alibaba.yaml b/http/misconfiguration/proxy/metadata-alibaba.yaml index b190f9259c..7ef6131f72 100644 --- a/http/misconfiguration/proxy/metadata-alibaba.yaml +++ b/http/misconfiguration/proxy/metadata-alibaba.yaml @@ -28,18 +28,21 @@ info: http: - raw: - |+ - GET http://{{hostval}}/dynamic/instance-identity/document HTTP/1.1 + GET http://{{hostval}}/{{path}} HTTP/1.1 Host: {{hostval}} payloads: hostval: - alibaba.oast.pro - 100.100.100.200 + path: + - dynamic/instance-identity/document + - 2016-01-01/dynamic/instance-identity/document unsafe: true matchers: - type: word part: body words: - - "zone-id" + - '","serial-number":"' # digest: 490a004630440220495fde6b8e524846446e53dead7f589f22c254d0ca7b6e09e07210469773749f0220264d2180b4589c8663f68bab544d951ad739fae7f3b6dccaaacee29718cb4778:922c64590222798bb761d5b6d8e72950