25 lines
522 B
YAML
25 lines
522 B
YAML
id: cache-poisoning
|
|
|
|
info:
|
|
name: Cache Poisoning
|
|
author: melbadry9 & xelkomy
|
|
severity: low
|
|
reference: https://blog.melbadry9.xyz/fuzzing/nuclei-cache-poisoning
|
|
|
|
requests:
|
|
- raw:
|
|
- |
|
|
GET /?mel=9 HTTP/1.1
|
|
X-Forwarded-Prefix: cache.example.com
|
|
X-Forwarded-Host: cache.example.com
|
|
X-Forwarded-For: cache.example.com
|
|
|
|
- |
|
|
GET /?mel=9 HTTP/1.1
|
|
|
|
req-condition: true
|
|
matchers:
|
|
- type: dsl
|
|
dsl:
|
|
- 'contains(body_2, "cache.example.com")'
|