Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

internal-ip-disclosure.yaml matches any IP address, not only internal ones #9406

Open
Open-Sec opened this issue Mar 23, 2024 · 1 comment
Open
Assignees
Labels
false-positive Nuclei template reporting invalid/unexpected result

Comments

@Open-Sec
Copy link
Contributor

Nuclei Version:

Nuclei Engine Version: v3.2.2

Template file:

http/misconfiguration/internal-ip-disclosure.yaml

Command to reproduce:

nuclei -u http://public_IP -t ./http/misconfiguration/internal-ip-disclosure.yaml

Anything else:

Regular expression used to match internal IP addresses matches any IP address, so if the redirect (by Location means) points to another IP public address, it will match.

screenshot_2024-03-23_07-36
screenshot_2024-03-23_07-35_1
screenshot_2024-03-23_07-35

Suggested regex :
^(10(.(25[0-5]|2[0-4][0-9]|1[0-9]{1,2}|[0-9]{1,2})){3}|((172.(1[6-9]|2[0-9]|3[01]))|192.168)(.(25[0-5]|2[0-4][0-9]|1[0-9]{1,2}|[0-9]{1,2})){2})$

(regex taken from https://stackoverflow.com/a/44333761)

@Open-Sec Open-Sec added the false-positive Nuclei template reporting invalid/unexpected result label Mar 23, 2024
@Open-Sec
Copy link
Contributor Author

Template http/misconfiguration/iis-internal-ip-disclosure.yaml has same issue

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
false-positive Nuclei template reporting invalid/unexpected result
Projects
None yet
Development

No branches or pull requests

2 participants