Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Bug] Template generic-blind-xxe wrong raw definition #9488

Open
derekkddj opened this issue Apr 2, 2024 · 2 comments
Open

[Bug] Template generic-blind-xxe wrong raw definition #9488

derekkddj opened this issue Apr 2, 2024 · 2 comments
Assignees

Comments

@derekkddj
Copy link

The original template is:

id: generic-blind-xxe

info:
  name: Generic Blind XXE
  author: geeknik
  severity: high
  description: This template detects Generic Blind XXE.
  metadata:
    max-request: 1
  tags: xxe,generic,blind

http:
  - raw:
      - |
        POST / HTTP/1.1
        Host: {{Hostname}}

But acording to documentation:
https://docs.projectdiscovery.io/templates/protocols/http/raw-http

It should be:

id: generic-blind-xxe

info:
  name: Generic Blind XXE
  author: geeknik
  severity: high
  description: This template detects Generic Blind XXE.
  metadata:
    max-request: 1
  tags: xxe,generic,blind

http:
  - raw:
      - |
        POST  HTTP/1.1
        Host: {{Hostname}}

With the original template nuclei always add a trailing slash to every URL.
www.target.com/wii -> www.target.com/wii/

And is not the intended operation.

@ehsandeep
Copy link
Member

@dhd0004 there is bug in nuclei engine that is being fixed here - projectdiscovery/nuclei#4955

@derekkddj
Copy link
Author

derekkddj commented Apr 2, 2024

but in that bug they were using "unsafe:true", not in this template
EDIT: sorry, i saw there was a bug referenced projectdiscovery/nuclei#4921

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

3 participants