mirror of https://github.com/daffainfo/nuclei.git
73 lines
2.3 KiB
Go
73 lines
2.3 KiB
Go
|
//nolint //do not lint as examples with no usage
|
||
|
|
package templates
|
||
|
|
|
||
|
|
import (
|
||
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/operators"
|
||
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/operators/extractors"
|
||
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/operators/matchers"
|
||
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/protocols/dns"
|
||
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/protocols/file"
|
||
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/protocols/http"
|
||
|
|
"github.com/projectdiscovery/nuclei/v2/pkg/protocols/network"
|
||
|
|
)
|
||
|
|
|
||
|
|
var (
|
||
|
|
exampleInfoStructure = map[string]interface{}{
|
||
|
|
"name": "Argument Injection in Ruby Dragonfly",
|
||
|
|
"author": "0xsapra",
|
||
|
|
"severity": "critical",
|
||
|
|
"reference": "https://zxsecurity.co.nz/research/argunment-injection-ruby-dragonfly/",
|
||
|
|
"tags": "cve,cve2021,rce,ruby",
|
||
|
|
}
|
||
|
|
_ = exampleInfoStructure
|
||
|
|
|
||
|
|
exampleNormalHTTPRequest = &http.Request{
|
||
|
|
Method: "GET",
|
||
|
|
Path: []string{"{{BaseURL}}/.git/config"},
|
||
|
|
Operators: operators.Operators{
|
||
|
|
MatchersCondition: "and",
|
||
|
|
Matchers: []*matchers.Matcher{
|
||
|
|
{Type: "word", Words: []string{"[core]"}},
|
||
|
|
{Type: "dsl", DSL: []string{"!contains(tolower(body), '<html')", "!contains(tolower(body), '<body')"}, Condition: "and"},
|
||
|
|
{Type: "status", Status: []int{200}}},
|
||
|
|
},
|
||
|
|
}
|
||
|
|
_ = exampleNormalHTTPRequest
|
||
|
|
|
||
|
|
exampleNormalDNSRequest = &dns.Request{
|
||
|
|
Name: "{{FQDN}}",
|
||
|
|
Type: "CNAME",
|
||
|
|
Class: "inet",
|
||
|
|
Retries: 2,
|
||
|
|
Recursion: true,
|
||
|
|
Operators: operators.Operators{
|
||
|
|
Extractors: []*extractors.Extractor{
|
||
|
|
{Type: "regex", Regex: []string{"ec2-[-\\d]+\\.compute[-\\d]*\\.amazonaws\\.com", "ec2-[-\\d]+\\.[\\w\\d\\-]+\\.compute[-\\d]*\\.amazonaws\\.com"}},
|
||
|
|
},
|
||
|
|
},
|
||
|
|
}
|
||
|
|
_ = exampleNormalDNSRequest
|
||
|
|
|
||
|
|
exampleNormalFileRequest = &file.Request{
|
||
|
|
Extensions: []string{"all"},
|
||
|
|
Operators: operators.Operators{
|
||
|
|
Extractors: []*extractors.Extractor{
|
||
|
|
{Type: "regex", Regex: []string{"amzn\\.mws\\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"}},
|
||
|
|
},
|
||
|
|
},
|
||
|
|
}
|
||
|
|
_ = exampleNormalFileRequest
|
||
|
|
|
||
|
|
exampleNormalNetworkRequest = &network.Request{
|
||
|
|
Inputs: []*network.Input{{Data: "envi\r\nquit\r\n"}},
|
||
|
|
Address: []string{"{{Hostname}}", "{{Hostname}}:2181"},
|
||
|
|
ReadSize: 2048,
|
||
|
|
Operators: operators.Operators{
|
||
|
|
Matchers: []*matchers.Matcher{
|
||
|
|
{Type: "word", Words: []string{"zookeeper.version"}},
|
||
|
|
},
|
||
|
|
},
|
||
|
|
}
|
||
|
|
_ = exampleNormalNetworkRequest
|
||
|
|
)
|