mirror of
https://github.com/projectdiscovery/nuclei.git
synced 2025-12-18 07:45:28 +00:00
32 lines
509 B
YAML
32 lines
509 B
YAML
|
id: headless-query-fuzzing
|
||
|
|
|
||
|
|
info:
|
||
|
|
name: Example Query Fuzzing
|
||
|
|
author: pdteam
|
||
|
|
severity: info
|
||
|
|
|
||
|
|
headless:
|
||
|
|
- steps:
|
||
|
|
- action: navigate
|
||
|
|
args:
|
||
|
|
url: "{{BaseURL}}"
|
||
|
|
- action: waitload
|
||
|
|
|
||
|
|
payloads:
|
||
|
|
redirect:
|
||
|
|
- "blog.com"
|
||
|
|
- "portal.com"
|
||
|
|
|
||
|
|
fuzzing:
|
||
|
|
- part: query
|
||
|
|
mode: single
|
||
|
|
type: replace
|
||
|
|
fuzz:
|
||
|
|
- "https://{{redirect}}"
|
||
|
|
|
||
|
|
matchers:
|
||
|
|
- type: word
|
||
|
|
part: body
|
||
|
|
words:
|
||
|
|
- "{{redirect}}"
|