mirror of
https://github.com/projectdiscovery/nuclei.git
synced 2025-12-18 03:35:27 +00:00
a34b94e62f
* Basic headless fuzzing * Remove debug statements * Add integration tests * Update template * Fix recognize payload value in matcher * Update tempalte * use req.SetURL() --------- Co-authored-by: Tarun Koyalwar <tarun@projectdiscovery.io>
32 lines
509 B
YAML
32 lines
509 B
YAML
id: headless-query-fuzzing
|
|
|
|
info:
|
|
name: Example Query Fuzzing
|
|
author: pdteam
|
|
severity: info
|
|
|
|
headless:
|
|
- steps:
|
|
- action: navigate
|
|
args:
|
|
url: "{{BaseURL}}"
|
|
- action: waitload
|
|
|
|
payloads:
|
|
redirect:
|
|
- "blog.com"
|
|
- "portal.com"
|
|
|
|
fuzzing:
|
|
- part: query
|
|
mode: single
|
|
type: replace
|
|
fuzz:
|
|
- "https://{{redirect}}"
|
|
|
|
matchers:
|
|
- type: word
|
|
part: body
|
|
words:
|
|
- "{{redirect}}"
|