v9.8.1
projectdiscovery/nuclei-templatesv9.8.1Apr 8, 2024by princechaddha
AI Summary
Focuses on adding DAST (Dynamic Application Security Testing) templates and various CVEs across HTTP, JavaScript, and Network protocols. Includes PostgreSQL enumeration and various default login templates.
Key Highlights
- Added DAST templates for SQLi, XSS, SSTI, LFI, SSRF, and XXE
- Added PostgreSQL enumeration templates (default DB, version, users)
- Added default login templates for 3com and 3ware
- Added network C2 trojan templates (Darkcomet, Orcus, etc.)
- Added generic RFI and Open Redirect templates
New Features
- 77 New Templates Added
- 29 CVEs Added
- 6 First-time contributions
- Added JavaScript enumeration and misconfiguration templates
Full Release Notes
### What's Changed #### New Templates Added: `77` | CVEs Added: `29` | First-time contributions: `6` - http/cves/2024/CVE-2024-20767.yaml by @iamnoooob,@rootxharsh,@pdresearch - http/cves/2024/CVE-2024-27564.yaml by @DhiyaneshDK - http/cves/2024/CVE-2024-28255.yaml by @DhiyaneshDK,@iamnooob - http/cves/2024/CVE-2024-28734.yaml by @Kazgangap - http/cves/2024/CVE-2024-29059.yaml by @iamnoooob,@rootxharsh,@DhiyaneshDk,@pdresearch - http/cves/2024/CVE-2024-29269.yaml by @ritikchaddha - http/cves/2023/CVE-2023-0159.yaml by @c4sper0 - http/cves/2023/CVE-2023-0678.yaml by @princechaddha,@ritikchaddha - http/cves/2023/CVE-2023-34993.yaml by @dwisiswant0 - http/cves/2023/CVE-2023-47218.yaml by @ritikchaddha - http/cves/2022/CVE-2022-29013.yaml by @DhiyaneshDK - http/cves/2022/CVE-2022-32430.yaml by @DhiyaneshDK - http/cves/2022/CVE-2022-41412.yaml by @null_hypothesis - http/cves/2021/CVE-2021-46418.yaml by @DhiyaneshDK - http/cves/2021/CVE-2021-46419.yaml by @DhiyaneshDK - http/cves/2019/CVE-2019-9632.yaml by @pdteam - http/cves/2018/CVE-2018-10735.yaml by @DhiyaneshDk - http/cves/2018/CVE-2018-10736.yaml by @DhiyaneshDK - http/cves/2018/CVE-2018-10737.yaml by @DhiyaneshDK - http/cves/2018/CVE-2018-10738.yaml by @DhiyaneshDk - http/cves/2018/CVE-2018-6605.yaml by @DhiyaneshDk - http/cves/2018/CVE-2018-7314.yaml by @DhiyaneshDK - http/cves/2016/CVE-2016-5674.yaml by @DhiyaneshDK - dast/cves/2018/CVE-2018-19518.yaml by @princechaddha - dast/cves/2021/CVE-2021-45046.yaml by @princechaddha - dast/cves/2022/CVE-2022-34265.yaml by @princechaddha - dast/cves/2022/CVE-2022-42889.yaml by @mordavid,@princechaddha - dast/vulnerabilities/cmdi/blind-oast-polyglots.yaml by @pdteam,@geeknik - dast/vulnerabilities/cmdi/ruby-open-rce.yaml by @pdteam - dast/vulnerabilities/crlf/cookie-injection.yaml by @pdteam - dast/vulnerabilities/crlf/crlf-injection.yaml by @pdteam - dast/vulnerabilities/csti/angular-client-side-template-injection.yaml by @theamanrawat - dast/vulnerabilities/lfi/lfi-keyed.yaml by @pwnhxl - dast/vulnerabilities/lfi/linux-lfi-fuzz.yaml by @DhiyaneshDK - dast/vulnerabilities/lfi/windows-lfi-fuzz.yaml by @pussycat0x - dast/vulnerabilities/redirect/open-redirect.yaml by @princechaddha - dast/vulnerabilities/rfi/generic-rfi.yaml by @m4lwhere - dast/vulnerabilities/sqli/sqli-error-based.yaml by @geeknik,@pdteam - dast/vulnerabilities/ssrf/blind-ssrf.yaml by @pdteam - dast/vulnerabilities/ssrf/response-ssrf.yaml by @pdteam,@pwnhxl,@j4vaovo - dast/vulnerabilities/ssti/reflection-ssti.yaml by @pdteam - dast/vulnerabilities/xss/dom-xss.yaml by @theamanrawat - dast/vulnerabilities/xss/reflected-xss.yaml by @pdteam - dast/vulnerabilities/xxe/generic-xxe.yaml by @pwnhxl - http/vulnerabilities/dahua/dahua-eims-rce.yaml by @DhiyaneshDk - http/vulnerabilities/huatian/huatian-oa-sqli.yaml by @ritikchaddha - http/vulnerabilities/landray/landray-eis-sqli.yaml by @DhiyaneshDK - http/vulnerabilities/other/voyager-lfi.yaml by @mammad_rahimzada - javascript/cves/2012/CVE-2012-2122.yaml by @pussycat0x - javascript/cves/2019/CVE-2019-9193.yaml by @pussycat0x - javascript/enumeration/minecraft-enum.yaml by @pussycat0x - javascript/enumeration/pgsql/pgsql-default-db.yaml by @pussycat0x - javascript/enumeration/pgsql/pgsql-file-read.yaml by @pussycat0x - javascript/enumeration/pgsql/pgsql-list-database.yaml by @pussycat0x - javascript/enumeration/pgsql/pgsql-list-password-hashes.yaml by @pussycat0x - javascript/enumeration/pgsql/pgsql-list-users.yaml by @pussycat0x - javascript/enumeration/pgsql/pgsql-version-detect.yaml by @pussycat0x - javascript/misconfiguration/pgsql/pgsql-extensions-rce.yaml by @pussycat0x - javascript/misconfiguration/pgsql/postgresql-empty-password.yaml by @pussycat0x - javascript/udp/detection/tftp-detect.yaml by @pussycat0x - http/default-logins/3com/3Com-wireless-default-login.yaml by @ritikchaddha - http/default-logins/3ware-default-login.yaml by @ritikchaddha - http/default-logins/next-terminal/next-terminal-default-login.yaml by @ritikchaddha - http/exposed-panels/amprion-gridloss-panel.yaml by @righettod - http/exposed-panels/safenet-authentication-panel.yaml by @righettod - http/exposed-panels/syfadis-xperience-panel.yaml by @righettod - http/exposures/configs/deployment-ini.yaml by @Michal Mikolas (nanuqcz) - http/miscellaneous/form-detection.yaml by @pdteam - http/misconfiguration/https-to-http-redirect.yaml by @kazet - http/technologies/celebrus-detect.yaml by @righettod - http/technologies/privatebin-detect.yaml by @righettod - http/technologies/simplesamlphp-detect.yaml by @righettod - http/technologies/yourls-detect.yaml by @lstatro - network/c2/darkcomet-trojan.yaml by @pussycat0x - network/c2/darktrack-rat-trojan.yaml by @pussycat0x - network/c2/orcus-rat-trojan.yaml by @pussycat0x - network/c2/xtremerat-trojan.yaml by @pussycat0x ## New Contributors * @omkar7505 made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9407 * @lstatro made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9473 * @null-hyp0thesis made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9497 * @memmedrehimzade made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9463 * @denandz made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9480 * @hossamshady11 made their first contribution in https://github.com/projectdiscovery/nuclei-templates/pull/9514 **Full Changelog**: https://github.com/projectdiscovery/nuclei-templates/compare/v9.8.0...v9.8.1