Merge pull request #8237 from pentesttools-com/Fix-CVE-2022-1595

fix: template for CVE-2022-1595
patch-3
Dhiyaneshwaran 2024-05-31 10:44:49 +05:30 committed by GitHub
commit ffea880446
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 3 additions and 12 deletions

View File

@ -34,20 +34,11 @@ http:
HEAD /wp-login.php HTTP/1.1 HEAD /wp-login.php HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}
Cookie: valid_login_slug=1 Cookie: valid_login_slug=1
- |
HEAD /wp-login.php HTTP/1.1
Host: {{Hostname}}
matchers-condition: and
matchers: matchers:
- type: dsl - type: dsl
dsl: dsl:
- "status_code_1 == 302" - "status_code == 302"
- "contains(header_1, 'wordpress_')" - "contains(header, 'wordpress_')"
- "contains(header_1, 'Location')" - "contains(header, 'Location')"
condition: and condition: and
- type: dsl
dsl:
- "status_code_2 != 302"
# digest: 4b0a00483046022100e18acddc8a03f90c8867c2ea654efa225e4ac169f903b561a1db712940829c96022100c0c0bcdba073f1b26b9a9c4576675641150134cdaba9d80a3d962bf2ad6c2676:922c64590222798bb761d5b6d8e72950