Repository navigation
Template not working as expected #2532
|
Hi Sandeep and Team, I have created below template but unfortunately it is not working as expected. Template that I have created id: php setup exposed
info:
name: php setup exposed
author: vishnu
severity: medium
requests:
- raw:
- |
GET /{{setup}} HTTP/1.1
Host: {{Hostname}}
payloads:
setup: helpers/payloads/php-setup.txt
attack: sniper
matchers-condition: and
matchers:
- type: word
words:
- "phpMyAdmin"
- "Export"
- "Overview"
- "Import"
part: header
condition: andTemplate that is already there.... id: phpmyadmin-setup
info:
name: Publicly Accessible Phpmyadmin Setup
author: sheikhrishad
severity: medium
tags: misc
requests:
- method: GET
path:
- "{{BaseURL}}/phpmyadmin/scripts/setup.php"
- "{{BaseURL}}/_phpmyadmin/scripts/setup.php"
- "{{BaseURL}}/forum/phpmyadmin/scripts/setup.php"
- "{{BaseURL}}/php/phpmyadmin/scripts/setup.php"
- "{{BaseURL}}/typo3/phpmyadmin/scripts/setup.php"
- "{{BaseURL}}/web/phpmyadmin/scripts/setup.php"
- "{{BaseURL}}/xampp/phpmyadmin/scripts/setup.php"
- "{{BaseURL}}/sysadmin/phpMyAdmin/scripts/setup.php"
matchers-condition: and
matchers:
- type: word
words:
- "You want to configure phpMyAdmin using web interface"
- type: status
status:
- 200This one working as expected but mine is not working ....could you please check and le us know what I'm missing here. This is how my php-setup.txt looks like Thanks and regards, |
Answered by
princechaddha
Aug 31, 2021
Replies: 2 comments
|
Hello @Vishnuraghav89, The above template works as expected. Please confirm the payload's file path before running the template and it would be helpful if you can provide |
0 replies
Answer selected by
olearycrew
|
Moving this to the discussion as this is not a bug but a syntax issue. |
0 replies
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Hello @Vishnuraghav89, The above template works as expected. Please confirm the payload's file path before running the template and it would be helpful if you can provide
-debugdata so we can further investigate the issue