Skip to content

Commit 7556d43

Browse files
committed
Fix 5.2.6.yaml
1 parent c227c20 commit 7556d43

File tree

1 file changed

+3
-5
lines changed

1 file changed

+3
-5
lines changed

templates/dast/5.2.6.yaml

Lines changed: 3 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,4 +1,4 @@
1-
id: id: ASVS-4-0-3-V5-2-6
1+
id: ASVS-4-0-3-V5-2-6
22

33
info:
44
name: ASVS 5.2.6 Check
@@ -10,7 +10,7 @@ info:
1010
- https://owasp.org/www-project-web-security-testing-guide/v42/4-Web_Application_Security_Testing/07-Input_Validation_Testing/19-Testing_for_Server-Side_Request_Forgery
1111
- https://snbig.github.io/Vulnerable-Pages/ASVS_12_6_1/
1212
- https://github.com/projectdiscovery/nuclei-templates/blob/main/dast/vulnerabilities/ssrf/response-ssrf.yaml
13-
tags: asvs,5.2.6
13+
tags: asvs,5.2.6
1414
description: |
1515
Verify that the application protects against SSRF attacks, by validating or sanitizing untrusted data or HTTP file metadata, such as filenames and URL input fields, and uses allow lists of protocols, domains, paths and ports.
1616
@@ -45,10 +45,8 @@ http:
4545
fuzz:
4646
- "{{ssrf}}"
4747

48-
- part: query
48+
- part: body
4949
mode: single
50-
values:
51-
- "(https|http|file)(%3A%2F%2F|://)(.*?)"
5250
fuzz:
5351
- "{{ssrf}}"
5452

0 commit comments

Comments
 (0)