Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

【误报】nuclei yaml模块 CVE-2019-1003000 只有第一个请求符合匹配,但提示存在漏洞。 #2256

Open
kang0x0 opened this issue Dec 31, 2024 · 1 comment

Comments

@kang0x0
Copy link

kang0x0 commented Dec 31, 2024

问题描述

yaml中存在4个http请求,只有第一个符合匹配规则。
image

第4个请求中没有相关匹配字符。
image
image

image

预期行为

不应提示存在漏洞。
image

环境信息

  • 操作系统: Windows_11
  • 系统架构: x64
  • Yakit 版本: 1.3.8-1227
  • YakLang 版本: 1.3.8-beta3
@WAY29
Copy link
Collaborator

WAY29 commented Jan 6, 2025

目前yakit中的nuclei不支持带flow的模板

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants