mirror of https://github.com/daffainfo/nuclei.git
32 lines
509 B
YAML
32 lines
509 B
YAML
id: headless-query-fuzzing
|
|
|
|
info:
|
|
name: Example Query Fuzzing
|
|
author: pdteam
|
|
severity: info
|
|
|
|
headless:
|
|
- steps:
|
|
- action: navigate
|
|
args:
|
|
url: "{{BaseURL}}"
|
|
- action: waitload
|
|
|
|
payloads:
|
|
redirect:
|
|
- "blog.com"
|
|
- "portal.com"
|
|
|
|
fuzzing:
|
|
- part: query
|
|
mode: single
|
|
type: replace
|
|
fuzz:
|
|
- "https://{{redirect}}"
|
|
|
|
matchers:
|
|
- type: word
|
|
part: body
|
|
words:
|
|
- "{{redirect}}"
|