We read every piece of feedback, and take your input very seriously.
To see all available qualifiers, see our documentation.
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
The original template is:
id: generic-blind-xxe info: name: Generic Blind XXE author: geeknik severity: high description: This template detects Generic Blind XXE. metadata: max-request: 1 tags: xxe,generic,blind http: - raw: - | POST / HTTP/1.1 Host: {{Hostname}}
But acording to documentation: https://docs.projectdiscovery.io/templates/protocols/http/raw-http
It should be:
id: generic-blind-xxe info: name: Generic Blind XXE author: geeknik severity: high description: This template detects Generic Blind XXE. metadata: max-request: 1 tags: xxe,generic,blind http: - raw: - | POST HTTP/1.1 Host: {{Hostname}}
With the original template nuclei always add a trailing slash to every URL. www.target.com/wii -> www.target.com/wii/
And is not the intended operation.
The text was updated successfully, but these errors were encountered:
@dhd0004 there is bug in nuclei engine that is being fixed here - projectdiscovery/nuclei#4955
Sorry, something went wrong.
but in that bug they were using "unsafe:true", not in this template EDIT: sorry, i saw there was a bug referenced projectdiscovery/nuclei#4921
ritikchaddha
No branches or pull requests
The original template is:
But acording to documentation:
https://docs.projectdiscovery.io/templates/protocols/http/raw-http
It should be:
With the original template nuclei always add a trailing slash to every URL.
www.target.com/wii -> www.target.com/wii/
And is not the intended operation.
The text was updated successfully, but these errors were encountered: