Merge branch 'main' of https://github.com/hahwul/dalfox into main

hahwul · Dec 17, 2021 · 4819423 · 4819423
2 parents ca8c7e0 + d0f46a1
commit 4819423
Showing 1 changed file with 14 additions and 11 deletions.
diff --git a/docs/_docs/json.md b/docs/_docs/json.md
@@ -13,7 +13,8 @@ permalink: /docs/json/
       "param":"Parmeter",
       "payload":"Attack Value",
       "evidence":"Evidence with response body",
-      "cwe":"CWE ID"
+      "cwe":"CWE ID",
+      "severity": "Severity (Low/Medium/High)"
    }
 ```
 
@@ -28,17 +29,19 @@ permalink: /docs/json/
 | payload     | Paramter value              | - Attack code in value                                       |
 | evidence    | Evidence with repsonse body | - Simple codeview of where it's injected in response body.   |
 | cwe         | CWE ID                      | - Mapping CWE ID                                             |
+| severity    | Severity                    | - Severity (Low/Medium/High)                                 |
 
 ```json
 {
-      "type":"V",
-      "inject_type":"inHTML-URL",
-      "poc_type":"",
-      "method":"GET",
-      "data":"http://testphp.vulnweb.com/listproducts.php?artist=123%27%22%3E%3Ciframe+srcdoc%3D%22%3Cinput+onauxclick%3Dalert%281%29%3E%22+class%3Ddalfox%3E%3C%2Fiframe%3E",
-      "param":"artist",
-      "payload":"'\"\u003e\u003ciframe srcdoc=\"\u003cinput onauxclick=alert(1)\u003e\" class=dalfox\u003e\u003c/iframe\u003e",
-      "evidence":"48 line:  syntax to use near ''\"\u003e\u003ciframe srcdoc=\"\u003cinput onauxclick=alert(1)\u003e\" class=dalfox",
-      "cwe":"CWE-79"
-   }
+    "type": "V",
+    "inject_type": "inHTML-URL",
+    "poc_type": "",
+    "method": "GET",
+    "data": "http://testphp.vulnweb.com/listproducts.php?cat=%27%22%3E%3Cimg%2Fsrc%2Fonerror%3D.1%7Calert%60%60+class%3Ddalfox%3E",
+    "param": "cat",
+    "payload": "'\"><img/src/onerror=.1|alert`` class=dalfox>",
+    "evidence": "48 line:  syntax to use near ''\"><img/src/onerror=.1|alert`` class=dalfox>' at line 1",
+    "cwe": "CWE-79",
+    "severity": "High"
+}
 ```