Commit Graph

705 Commits (b5ecce44ecc97b6b24faedb88bb346adb3b43851)

Author SHA1 Message Date
Dhiyaneshwaran 9b8eb51884
Create sentinel-license-monitor.yaml 2024-04-17 14:21:58 +05:30
Dhiyaneshwaran db3a3e08cc
Create phpipam-installer.yaml 2024-04-16 17:30:14 +05:30
GitHub Action 362e3a389c Auto Template Signing [Fri Apr 12 10:58:46 UTC 2024] 🤖 2024-04-12 10:58:47 +00:00
Prince Chaddha 852498e4d0
Merge pull request #9569 from projectdiscovery/convert-paths-to-payloads
feat: convert paths with lots of elements to payloads
2024-04-12 16:26:11 +05:30
Ice3man a63774c77e feat: convert paths with lots of elements to payloads 2024-04-12 16:01:51 +05:30
Dhiyaneshwaran 4ed1e6ff8a
Create apple-cups-exposure.yaml 2024-04-11 22:06:45 +05:30
GitHub Action 975d8c509c Auto Template Signing [Wed Apr 10 11:26:32 UTC 2024] 🤖 2024-04-10 11:26:32 +00:00
Dhiyaneshwaran 34fa335cc3
Create helm-dashboard-exposure.yaml 2024-04-10 12:36:00 +05:30
GitHub Action a6ce78d54f Auto Template Signing [Wed Apr 10 06:34:16 UTC 2024] 🤖 2024-04-10 06:34:17 +00:00
Dhiyaneshwaran 52880d10be
Merge pull request #9526 from projectdiscovery/thanos-prometheus-exposure
Create thanos-prometheus-exposure.yaml
2024-04-10 12:02:00 +05:30
GitHub Action ebdd5f3527 Auto Template Signing [Wed Apr 10 06:21:34 UTC 2024] 🤖 2024-04-10 06:21:34 +00:00
Dhiyaneshwaran a51fc4633b
Merge pull request #9533 from projectdiscovery/pussycat0x-patch-7
Create dlink-unauth-cgi-script.yaml
2024-04-10 11:49:12 +05:30
GitHub Action 6f150bc65d Auto Template Signing [Wed Apr 10 06:11:05 UTC 2024] 🤖 2024-04-10 06:11:05 +00:00
Dhiyaneshwaran b1c895fb8a
added condition 2024-04-10 11:39:42 +05:30
Dhiyaneshwaran ea19bb6939
fix-fp 2024-04-10 11:36:03 +05:30
GitHub Action b5b471bb26 Auto Template Signing [Wed Apr 10 06:03:16 UTC 2024] 🤖 2024-04-10 06:03:16 +00:00
Dhiyaneshwaran c934233d50
update matcher 2024-04-10 11:30:03 +05:30
Dhiyaneshwaran 264e93dc02
fix format 2024-04-10 11:27:55 +05:30
pussycat0x 2e3e99f41a
Create intelbras-dvr-unauth.yaml 2024-04-09 23:08:47 +05:30
pussycat0x 54a17cd251
Update dlink-unauth-cgi-script.yaml 2024-04-09 23:01:33 +05:30
pussycat0x 387deb3d87
Create dlink-unauth-cgi-script.yaml 2024-04-09 22:47:44 +05:30
Prince Chaddha 51db5ea193 Revert "TemplateMan Update [Mon Apr 8 11:30:07 UTC 2024] 🤖"
This reverts commit 433dda4ae5.
2024-04-08 17:04:33 +05:30
GitHub Action 433dda4ae5 TemplateMan Update [Mon Apr 8 11:30:07 UTC 2024] 🤖 2024-04-08 11:30:08 +00:00
Dhiyaneshwaran dc0f733d2b
fix trail space 2024-04-08 13:46:14 +05:30
Dhiyaneshwaran b9e9387a6c
Create thanos-prometheus-exposure.yaml 2024-04-08 13:43:43 +05:30
GitHub Action 7dc1438db2 Auto Template Signing [Fri Apr 5 05:14:31 UTC 2024] 🤖 2024-04-05 05:14:32 +00:00
Prince Chaddha 95ad98ac56
Update php-debugbar-exposure.yaml 2024-04-05 10:33:06 +05:30
GitHub Action 2484b7a89d Auto Template Signing [Thu Mar 28 06:21:40 UTC 2024] 🤖 2024-03-28 06:21:40 +00:00
Dhiyaneshwaran 49e7f5c28f
Merge pull request #9370 from kazet/https-to-http-redirect
Detecting https to http redirect
2024-03-28 11:49:32 +05:30
Dhiyaneshwaran 81324c7b33
add verified tag 2024-03-28 11:39:15 +05:30
Ritik Chaddha e1664ddd23
Update https-to-http-redirect.yaml 2024-03-27 23:11:38 +05:30
GitHub Action d62f95fce6 Auto Template Signing [Mon Mar 25 11:57:16 UTC 2024] 🤖 2024-03-25 11:57:17 +00:00
GitHub Action c491aa6724 TemplateMan Update [Sat Mar 23 09:28:19 UTC 2024] 🤖 2024-03-23 09:28:20 +00:00
GitHub Action 9b16d8e797 Auto Template Signing [Thu Mar 21 07:47:25 UTC 2024] 🤖 2024-03-21 07:47:25 +00:00
Dhiyaneshwaran 0cd4e5a335
Update and rename drupal-install.yaml to drupal-install.yaml 2024-03-21 13:11:35 +05:30
GitHub Action 2ede6795a6 Auto Template Signing [Tue Mar 19 16:40:41 UTC 2024] 🤖 2024-03-19 16:40:42 +00:00
Prince Chaddha b9a4f8433e reverted bruteforce tags to fuzz 2024-03-19 20:50:31 +05:30
Krzysztof Zając fd4de0717e Detecting https to http redirect 2024-03-18 10:32:48 +01:00
Muhammad Daffa 1b3e73db0e
Rename http/misconfiguration/posteio-installer.yaml to http/misconfiguration/installer/posteio-installer.yaml 2024-03-14 11:25:05 +07:00
GitHub Action 637dc9313d Auto Template Signing [Wed Mar 13 06:54:06 UTC 2024] 🤖 2024-03-13 06:54:07 +00:00
Ritik Chaddha e1d52be2ba
Create posteio-installer.yaml 2024-03-12 14:19:54 +05:30
GitHub Action a3f5095e10 Auto Template Signing [Fri Mar 8 12:38:52 UTC 2024] 🤖 2024-03-08 12:38:53 +00:00
Dhiyaneshwaran 27f73e50c3
Update cloudflare-rocketloader-htmli.yaml 2024-03-08 18:01:11 +05:30
GitHub Action 8834e1b2ac Auto Template Signing [Sat Mar 2 08:51:34 UTC 2024] 🤖 2024-03-02 08:51:34 +00:00
Ai Ho (j3ssie) 39caf221ed
[+] Added Cloudflare Rocket Loader HTML Injection (#9269)
* [+] Added Cloudflare Rocket Loader HTML Injection

* minor update

* misc updates

---------

Co-authored-by: Dhiyaneshwaran <leedhiyanesh@gmail.com>
Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com>
2024-03-02 14:19:28 +05:30
Dhiyaneshwaran 646fff5a3a
Rename docker-daemon-exposed.yaml to docker-daemon-exposed.yaml 2024-02-29 10:11:58 +05:30
GitHub Action aebb9e678b Auto Template Signing [Wed Feb 28 09:05:09 UTC 2024] 🤖 2024-02-28 09:05:10 +00:00
Dhiyaneshwaran 6f6a0aa6e7
Merge branch 'main' into princechaddha-patch-4 2024-02-28 14:25:50 +05:30
GitHub Action 19c8222d15 Auto Template Signing [Wed Feb 28 07:36:01 UTC 2024] 🤖 2024-02-28 07:36:02 +00:00
Prince Chaddha f1d8a9a218
Update open-proxy-internal.yaml 2024-02-28 12:59:00 +05:30
Ritik Chaddha 779990ccaf Update bruteforce tags 2024-02-28 10:41:31 +05:30
GitHub Action 5adf1866a3 Auto Template Signing [Mon Feb 26 11:57:15 UTC 2024] 🤖 2024-02-26 11:57:15 +00:00
Ritik Chaddha 15cbc61e92
Fix FP application-yaml.yaml 2024-02-26 16:23:56 +05:30
Dhiyaneshwaran 087d8760e6
Update and rename http/misconfiguration/screenconnect-authentication-bypass.yaml to http/cves/CVE-2024/CVE-2024-1709.yaml 2024-02-22 00:32:29 +05:30
GitHub Action 5145543e89 Auto Template Signing [Wed Feb 21 12:52:37 UTC 2024] 🤖 2024-02-21 12:52:37 +00:00
pussycat0x ee804539f0
Merge pull request #9184 from johnk3r/screenconnect-bypass
ScreenConnect Authentication Bypass
2024-02-21 18:20:26 +05:30
Dhiyaneshwaran ab6bb5ae34
fix matcher 2024-02-21 16:28:31 +05:30
johnk3r 1516cd16a3
Rename screenConnect-authentication-bypass.yaml to screenconnect-authentication-bypass.yaml 2024-02-21 07:52:30 -03:00
johnk3r a0f0f3f33d
Update screenConnect-authentication-bypass.yaml 2024-02-21 07:45:42 -03:00
johnk3r b8b24e0323
Create screenConnect-authentication-bypass.yaml 2024-02-21 07:41:25 -03:00
GitHub Action c24ed82080 Auto Template Signing [Wed Feb 21 07:35:06 UTC 2024] 🤖 2024-02-21 07:35:06 +00:00
Ritik Chaddha a4e3988051
updated severity & metadata 2024-02-21 13:00:38 +05:30
Dhiyaneshwaran ec46b6acf7
ConnectWise Setup Wizard - Exposure 2024-02-21 12:10:43 +05:30
GitHub Action 5509ed68d5 Auto Template Signing [Tue Feb 20 18:20:41 UTC 2024] 🤖 2024-02-20 18:20:41 +00:00
Ritik Chaddha 42346e7ff6
Merge pull request #9176 from kazet/fewer-fps-avideo
Fewer FPs for avideo installer
2024-02-20 23:48:38 +05:30
Krzysztof Zając 673db2f9d9 Fewer FPs for avideo installer 2024-02-20 18:05:45 +01:00
GitHub Action 7c46896600 Auto Template Signing [Mon Feb 12 18:33:19 UTC 2024] 🤖 2024-02-12 18:33:20 +00:00
Prince Chaddha 652903d374 replaced fuzz tag to brute-force 2024-02-12 23:02:40 +05:30
GitHub Action 97450f5a50 Auto Template Signing [Thu Feb 8 06:47:49 UTC 2024] 🤖 2024-02-08 06:47:50 +00:00
Ritik Chaddha 61185689c6
Merge pull request #9020 from knavesec/main
Add case-insensitive flags to fingerprinthub and tech-detect templates
2024-02-08 12:15:38 +05:30
GitHub Action 7f6cfce042 Auto Template Signing [Tue Jan 30 17:04:38 UTC 2024] 🤖 2024-01-30 17:04:39 +00:00
Ritik Chaddha b57c4ceebc
Merge pull request #9044 from t3l3machus/main
Add detection for SAP public admin web interface
2024-01-30 22:32:26 +05:30
Ritik Chaddha 2880a9a9f0
and condition & additional matcher added 2024-01-30 22:30:01 +05:30
GitHub Action 7c5356a93a Auto Template Signing [Tue Jan 30 10:52:54 UTC 2024] 🤖 2024-01-30 10:52:54 +00:00
Dhiyaneshwaran 5ed6b938ba
Merge pull request #9010 from FLX-0x00/main
implement node-express-dev-environment detection template
2024-01-30 16:20:33 +05:30
GitHub Action cd91099e2c Auto Template Signing [Tue Jan 30 10:49:24 UTC 2024] 🤖 2024-01-30 10:49:25 +00:00
kazet bc89f2ee75
Improving descriptions (#9048) 2024-01-30 16:17:24 +05:30
Dhiyaneshwaran adde990d87
formatting fix 2024-01-30 15:24:28 +05:30
Dhiyaneshwaran 283ec0bc03
Update node-express-dev-env.yaml 2024-01-30 15:23:48 +05:30
Ritik Chaddha 863fc27569
updated matcher format & req 2024-01-30 14:14:14 +05:30
Dhiyaneshwaran 42a422d896
added status code and tags 2024-01-30 13:10:14 +05:30
Ellis Springe b489a501eb adjusted gitea detection logic in both standard tech-detect and specific templates. current regex/detect appeared to be insufficient 2024-01-29 19:43:09 -07:00
Panagiotis Chartas 8bb6fcad4a
Create sap-public-admin.yaml 2024-01-29 19:39:50 +01:00
GitHub Action d1ce7c6527 Auto Template Signing [Mon Jan 29 12:41:50 UTC 2024] 🤖 2024-01-29 12:41:51 +00:00
GitHub Action 5c4a72935f TemplateMan Update [Mon Jan 29 11:58:34 UTC 2024] 🤖 2024-01-29 11:58:34 +00:00
GitHub Action e74af38f8d Auto Template Signing [Fri Jan 26 15:51:53 UTC 2024] 🤖 2024-01-26 15:51:54 +00:00
Dhiyaneshwaran bad767850f
Merge pull request #8992 from NxtTAB/main
Update IBM Websphere Friendly Path Exposure Template to Reduce False Positives
2024-01-26 21:19:35 +05:30
Dhiyaneshwaran da43f86301
fix trail space 2024-01-26 21:15:40 +05:30
GitHub Action 2f917f065c Auto Template Signing [Fri Jan 26 08:31:11 UTC 2024] 🤖 2024-01-26 08:31:12 +00:00
Ritik Chaddha 12d566e783
Merge pull request #8938 from projectdiscovery/updated-tags
Auto Tagged Templates
2024-01-26 13:58:45 +05:30
Ritik Chaddha f9322db69d Merge branch 'main' into updated-tags 2024-01-26 13:48:21 +05:30
Paul Werther 0c0265db7a
add flow in order to detect node.js on express first before sending malicious request 2024-01-25 20:20:00 +01:00
GitHub Action 7fec464f96 Auto Template Signing [Thu Jan 25 16:21:22 UTC 2024] 🤖 2024-01-25 16:21:24 +00:00
pussycat0x 6e707b4653
Merge pull request #9012 from projectdiscovery/springboot-startup
Create springboot-startup.yaml
2024-01-25 21:49:17 +05:30
Ritik Chaddha 129fae0047 Revert "Merge branch 'main' into updated-tags"
This reverts commit d3c7d73554.
2024-01-25 16:52:45 +05:30
Ritik Chaddha d3c7d73554 Merge branch 'main' into updated-tags 2024-01-25 16:49:26 +05:30
Dhiyaneshwaran 51010f90ec
added additional matcher 2024-01-25 16:04:12 +05:30
Dhiyaneshwaran 448e0eb44e
Create springboot-startup.yaml 2024-01-25 15:58:17 +05:30
Paul Werther 1a8f497330
linting 2024-01-25 10:42:53 +01:00
Paul Werther b9fc0ddf5e
implement node-express-dev-environment detection template 2024-01-25 10:32:41 +01:00
Prince Chaddha e1e802d2d9
Create springboot-integrationgraph.yaml 2024-01-25 13:43:41 +05:30
GitHub Action 5ced0a8e54 Auto Template Signing [Wed Jan 24 07:16:05 UTC 2024] 🤖 2024-01-24 07:16:06 +00:00
Dhiyaneshwaran b5b0abcb92
Merge pull request #8971 from kazet/fewer-fps-nuclei-template
Fewer FPs in mixed content Nuclei template
2024-01-24 12:44:01 +05:30
Ritik Chaddha b5fdb2f9d6
Update mixed-active-content.yaml 2024-01-24 11:59:58 +05:30
Thomas Baisley 6f16c9a416
Fix false positive: bei redirect to main page using Content-Location 2024-01-23 14:49:12 +01:00
GitHub Action 450270035b Auto Template Signing [Mon Jan 22 07:03:00 UTC 2024] 🤖 2024-01-22 07:03:00 +00:00
Ritik Chaddha 8d02bbca75
Create doris-dashboard.yaml 2024-01-22 12:16:26 +05:30
GitHub Action 35f9666a28 Auto Template Signing [Fri Jan 19 19:31:09 UTC 2024] 🤖 2024-01-19 19:31:10 +00:00
sea-god b07841daed
Update open-proxy-internal.yaml (#7042)
* Update open-proxy-internal.yaml

The current rule has false positives, and there should be an OR relationship between body2 and body23. The relationship between body2-23 and body1 is and

* updated dsl condition

* Update open-proxy-internal.yaml

---------

Co-authored-by: Prince Chaddha <prince@projectdiscovery.io>
2024-01-20 00:59:10 +05:30
Krzysztof Zając e317aa5677 lint 2024-01-19 11:09:09 +01:00
Krzysztof Zając 27fbfcfc52 Fewer FPs in mixed content Nuclei template 2024-01-19 11:03:28 +01:00
GitHub Action 9e98d5b5a2 Auto Template Signing [Fri Jan 19 08:44:19 UTC 2024] 🤖 2024-01-19 08:44:19 +00:00
sandeep 375da070de misc metadata update 2024-01-19 11:11:43 +05:30
GitHub Action 5c5df5873f Auto Template Signing [Mon Jan 15 11:49:24 UTC 2024] 🤖 2024-01-15 11:49:25 +00:00
Ritik Chaddha 8fbfc14ad5
Merge pull request #8897 from iamxhunt3r/main
Multiple Template Descriptions are updated.
2024-01-15 17:17:21 +05:30
GitHub Action 32cd37a9f4 Auto Template Signing [Sun Jan 14 14:05:19 UTC 2024] 🤖 2024-01-14 14:05:21 +00:00
GitHub Action b0a5d26eae TemplateMan Update [Sun Jan 14 13:49:26 UTC 2024] 🤖 2024-01-14 13:49:27 +00:00
Prince Chaddha bdd749d390 auto tagging via templateman 2024-01-14 14:51:50 +05:30
GitHub Action d4bb2105d8 Auto Template Signing [Fri Jan 12 06:44:43 UTC 2024] 🤖 2024-01-12 06:44:43 +00:00
Prince Chaddha 2d0ad42328
Update and rename cookies-without-httponly.yaml to cookies-without-httponly-secure.yaml 2024-01-12 12:05:38 +05:30
Dhiyaneshwaran 5b641161fa
Update cookies-without-httponly.yaml 2024-01-12 11:58:48 +05:30
GitHub Action 49be8c61c3 Auto Template Signing [Wed Jan 10 14:36:15 UTC 2024] 🤖 2024-01-10 14:36:15 +00:00
Ritik Chaddha f65e7e8758
Merge pull request #8921 from gtrrnr/patch-5
Fix FP on open-proxy-external.yaml
2024-01-10 20:04:00 +05:30
Ritik Chaddha 484c109b16
Update open-proxy-external.yaml 2024-01-10 19:35:25 +05:30
GitHub Action 789170ae7b Auto Template Signing [Wed Jan 10 12:33:43 UTC 2024] 🤖 2024-01-10 12:33:44 +00:00
Ritik Chaddha 791c429ef5
Merge pull request #8910 from Thabisocn/template_apache-serverstatus
Added/apache server status Template
2024-01-10 18:01:19 +05:30
Ritik Chaddha c48eeb5335
Update apache-server-status.yaml 2024-01-10 17:53:57 +05:30
Dhiyaneshwaran d99a2c1426 updated matcher 2024-01-10 12:29:23 +05:30
gtrrnr e222cf810f
Fix FP on open-proxy-external.yaml
Fixes cases when amazon bucket returns 403 with hostid html tag.
Just checking if request to interactsh contains interactsh header.
2024-01-09 16:12:29 +03:00
Dhiyaneshwaran d8c2fd7fdf
Update apache-server-status.yaml 2024-01-07 00:34:03 +05:30
GitHub Action bae4fdda17 Auto Template Signing [Sat Jan 6 17:17:11 UTC 2024] 🤖 2024-01-06 17:17:11 +00:00
Dhiyaneshwaran 8596512e6a
Merge pull request #8896 from fail-open/patch-1
Update ms-exchange-user-enum.yaml
2024-01-06 22:44:43 +05:30
Thabisocn 0fda4b428d Added/apache server status Template 2024-01-05 10:19:03 +02:00
GitHub Action b0ba12766d Auto Template Signing [Thu Jan 4 06:25:39 UTC 2024] 🤖 2024-01-04 06:25:40 +00:00
Dhiyaneshwaran 69e74d4099
Merge pull request #8901 from projectdiscovery/princechaddha-patch-3
Delete http/misconfiguration/httponly-cookie-detect.yaml
2024-01-04 11:53:20 +05:30
Dhiyaneshwaran 6d1da74022
author name addition 2024-01-04 11:45:10 +05:30
GitHub Action 86d7efd231 Auto Template Signing [Wed Jan 3 18:44:32 UTC 2024] 🤖 2024-01-03 18:44:33 +00:00
Dhiyaneshwaran 7e4792e378
Merge pull request #8708 from projectdiscovery/princechaddha-patch-4
Create php-composer-binary.yaml
2024-01-04 00:12:27 +05:30
GitHub Action ccf24d6ac2 Auto Template Signing [Wed Jan 3 18:35:52 UTC 2024] 🤖 2024-01-03 18:35:53 +00:00
Dhiyaneshwaran 553e7013e1
Update php-composer-binary.yaml 2024-01-04 00:05:05 +05:30
Prince Chaddha f9f780837e
Create cookies-without-httponly.yaml 2024-01-03 17:08:30 +05:30
Prince Chaddha 742b39ba27
Delete http/misconfiguration/httponly-cookie-detect.yaml 2024-01-03 16:58:32 +05:30
Prince Chaddha 3bcbe6b6b4
updated author name 2024-01-03 16:41:50 +05:30
Prince Chaddha 77f48c5463
Delete http/misconfiguration/gitlab/gitlab-public-registration.yaml 2024-01-03 16:41:22 +05:30
Prince Chaddha 0f8e22ce42
Update gitlab-public-signup.yaml 2024-01-03 16:40:08 +05:30
Vikas Gupta 7260daecbe Fixed Lint 2024-01-03 11:41:40 +05:30
Vikas Gupta 7753bff4bc Updated descriptions of templates 2024-01-03 11:38:41 +05:30
Ritik Chaddha 3e0dbb20f0
Update php-composer-binary.yaml 2024-01-02 21:02:35 +05:30
fail-open 9a5cbba7d6
Update ms-exchange-user-enum.yaml
handle underscores in extractor
2024-01-02 10:19:48 -05:00
GitHub Action 774134ed4e Auto Template Signing [Tue Jan 2 07:00:19 UTC 2024] 🤖 2024-01-02 07:00:19 +00:00