diff --git a/http/technologies/honeypot-detect.yaml b/http/technologies/honeypot-detect.yaml index ce207cd385..b8650ce302 100644 --- a/http/technologies/honeypot-detect.yaml +++ b/http/technologies/honeypot-detect.yaml @@ -4,10 +4,13 @@ info: name: Honeypot Detection author: j4vaovo severity: info - description: Honeypot Detection. - tags: honeypot,tech + description: | + Honeypot was Detected. + reference: + - https://github.com/zema1/yarx metadata: max-request: 1 + tags: honeypot,tech,cti variables: rand1: "{{randstr}}" @@ -15,10 +18,9 @@ variables: rand3: "{{randstr}}" http: - - raw: - - | - GET /?{{rand1}}=../../../../../../../../etc/passwd&{{rand3}}=1%20and%20updatexml(1,concat(0x7e,(select%20md5({{rand2}}))),1) HTTP/1.1 - Host: {{Hostname}} + - method: GET + path: + - "{{BaseURL}}/?{{rand1}}=../../../../../../../../etc/passwd&{{rand3}}=1%20and%20updatexml(1,concat(0x7e,(select%20md5({{rand2}}))),1)" matchers-condition: or matchers: