fixing few last one

fixing few templates
need to confirm this before adding this again
2026-11-07 08:36:19 -10:00 · 2020-07-11 12:02:02 +05:30 · 2020-07-11 11:39:55 +05:30 · 2020-07-11 11:22:19 +05:30 · 2020-07-11 11:20:35 +05:30 · 2020-07-11 10:36:40 +05:30
16 changed files with 51 additions and 17 deletions
@@ -9,6 +9,8 @@ requests:
  - method: GET
    path:
      - '{{BaseURL}}'
+
+    matchers-condition: and
    matchers:
      - type: dsl
        dsl:
@@ -26,5 +26,5 @@ requests:
          - 206
      - type: word
        words:
-          - nginx
-        part: header
+          - Content-Range
+        part: all
@@ -2,7 +2,7 @@ id: CVE-2018-19439

 info:
  name: Cross Site Scripting in Oracle Secure Global Desktop Administration Console
-  author: madrobot
+  author: madrobot & dwisiswant0
  severity: high

 requests:
@@ -12,5 +12,5 @@ requests:
    matchers:
      - type: word
        words:
-          - "<script>alert(1337)</script>"
+          - "<script>alert(1337)</script><!--</TITLE>"
        part: body
@@ -16,5 +16,5 @@ requests:
          - 200
      - type: word
        words:
-          - "javascript:alert(1337)"
+          - "SRC=\"javascript:alert(1337)\">"
        part: body
@@ -2,7 +2,7 @@ id: CVE-2020-8512

 info:
  name: IceWarp WebMail XSS
-  author: pdnuclei
+  author: pdnuclei & dwisiswant0
  severity: medium

 # source:- https://www.exploit-db.com/exploits/47988
@@ -13,9 +13,12 @@ requests:
    path:
      - '{{BaseURL}}/webmail/?color="><svg/onload=alert(document.domain)>"'
      - '{{BaseURL}}:32000/webmail/?color="><svg/onload=alert(document.domain)>"'
-
+    matchers-condition: and
    matchers:
      - type: word
        words:
-          - "<svg/onload=alert(document.domain)>"
+          - "<svg/onload=alert(document.domain)>\"\">"
        part: body
+      - type: status
+        status:
+          - 200
@@ -1,8 +1,8 @@
-id: jolokia instance
+id: jolokia-instance

 info:
  name: Jolokia Version Disclosure
-  author: mavericknerd
+  author: mavericknerd & dwisiswant0
  severity: low

 requests:
@@ -14,7 +14,10 @@ requests:
    matchers:
      - type: word
        words:
+          - '"timestamp":'
+          - '"protocol":'
          - '"agent":'
+        condition: and
      - type: status
        status:
          - 200
@@ -10,7 +10,7 @@ requests:
      - '{{BaseURL}}/Telerik.Web.UI.DialogHandler.aspx'
    headers:
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55
-    matchers-codition: and
+    matchers-condition: and
    matchers:
      - type: status
        status:
@@ -2,16 +2,28 @@ id: exposed-docker-api

 info:
  name: Exposed Docker API
-  author: furkansenan
+  author: furkansenan & dwisiswant0
  severity: informative

 requests:
  - method: GET
    path:
-      - '{{BaseURL}}:2376/version'
+      - "http://{{Hostname}}/version"
+      - "http://{{Hostname}}:2376/version"
+      - "http://{{Hostname}}/v1.24/version"
+      - "http://{{Hostname}}:2376/v1.24/version"
+    matchers-condition: and
    matchers:
      - type: word
        words:
-          - "Version"
-          - "Docker"
+          - "application/json"
+        part: header
+      - type: word
+        words:
+          - "KernelVersion"
+          - "BuildTime"
+        condition: and
        part: body
+      - type: status
+        status:
+          - 200
@@ -3,8 +3,8 @@ id: front-page-misconfig
 info:
  name: FrontPage configuration information discloure
  author: JTeles
-  severity: low
-  # reference: https://docs.microsoft.com/en-us/archive/blogs/fabdulwahab/security-protecting-sharepoint-server-applications
+  severity: info
+  # Reference: https://docs.microsoft.com/en-us/archive/blogs/fabdulwahab/security-protecting-sharepoint-server-applications

 requests:
  - method: GET
@@ -9,6 +9,8 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}/?pp=env"
+
+    matchers-condition: and
    matchers:
      - type: word
        words:
@@ -11,6 +11,8 @@ requests:
        regex:
          - "amzn\\.mws\\.[0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}"
        type: regex
+
+    matchers-condition: and
    matchers:
      - part: body
        regex:
@@ -9,6 +9,8 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}"
+
+    matchers-condition: and
    matchers:
      - type: regex
        part: body
@@ -9,6 +9,8 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}"
+
+    matchers-condition: and
    matchers:
      - type: regex
        part: body
@@ -12,6 +12,8 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}"
+
+    matchers-condition: and
    matchers:
      - type: regex
        part: body
@@ -9,6 +9,8 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}"
+
+    matchers-condition: and
    matchers:
      - type: regex
        part: body
@@ -12,6 +12,8 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}"
+
+    matchers-condition: and
    matchers:
      - type: regex
        part: body
Author	SHA1	Message	Date
bauthard	86059048ae	fixing few last one	2020-07-11 12:02:02 +05:30
bauthard	7e7afed768	fixing few templates need to confirm this before adding this again	2020-07-11 11:39:55 +05:30
bauthard	9f5a756753	Update slack-access-token.yaml	2020-07-11 11:22:19 +05:30
bauthard	5a6bddd7c9	adding condition	2020-07-11 11:20:35 +05:30
bauthard	f1eabdefd1	Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates	2020-07-11 10:36:40 +05:30
bauthard	9f5c7e7457	Update front-page-misconfig.yaml	2020-07-11 10:36:03 +05:30
bauthard	292197f823	Merge pull request #231 from dwisiswant0/fix-false-positives Fix from False-positive Results	2020-07-11 03:33:19 +05:30
Dwi Siswanto	d634b2710c	🔨 Fix CVE-2018-5230 from false-positives	2020-07-11 03:38:48 +07:00
Dwi Siswanto	8bb2915b01	🔨 Fix CVE-2020-8512 from false-positives	2020-07-11 03:30:14 +07:00
Dwi Siswanto	f216354342	🔨 Fix CVE-2018-19439 from false-positives	2020-07-11 03:12:41 +07:00
Dwi Siswanto	3a2ecdf809	🔨 Fix jolokia-instance from false-positives	2020-07-11 03:04:58 +07:00
Dwi Siswanto	44b27d7939	🔨 Fix exposed-docker-api from false-positives	2020-07-11 02:59:05 +07:00
bauthard	de35ddc8a5	Update telerik-dialoghandler-detect.yaml	2020-07-10 15:37:53 +05:30
bauthard	5e9005e2db	Update CVE-2017-7529.yaml	2020-07-10 15:08:52 +05:30
bauthard	ee41cc2b3d	Merge pull request #227 from harsh-bothra/patch-10 Create CVE-2017-6360.yaml	2020-07-10 14:22:40 +05:30
bauthard	e67853ce9d	Merge pull request #228 from harsh-bothra/patch-11 Create CVE-2017-6361.yaml	2020-07-10 14:22:29 +05:30
bauthard	2a37e53ed4	Update CVE-2017-6360.yaml	2020-07-10 14:19:05 +05:30
bauthard	2bc59cd709	Update CVE-2017-6361.yaml	2020-07-10 14:17:33 +05:30
bauthard	4b04635a8f	Merge pull request #229 from Marmelatze/CVE-2017-7529 improve CVE-2017-7529 detection	2020-07-10 13:52:51 +05:30
bauthard	f5b2e1b794	Update CVE-2017-7529.yaml	2020-07-10 13:51:33 +05:30
Florian Pfitzer	965e5947cd	improve CVE-2017-7529 detection	2020-07-09 13:12:36 +02:00
Harsh Bothra	aa2fa6a6c2	Create CVE-2017-6361.yaml Command Injection in authLogin.cgi 'reboot_notice_msg'	2020-07-09 12:40:32 +05:30
Harsh Bothra	704fb54ecc	Create CVE-2017-6360.yaml Command Injection in userConfig.cgi cloudPersonalSmtp 'hash'	2020-07-09 12:37:53 +05:30