From 7994b165d7df8de24b8d50ec9b70fd8a10415ed9 Mon Sep 17 00:00:00 2001 From: 0xblackbird Date: Thu, 11 Jul 2024 07:30:23 +0200 Subject: [PATCH 1/2] Improved template fingerprints for Jenkins + typo fix for Salesforce reference --- templates/services.json | 9 ++++++--- 1 file changed, 6 insertions(+), 3 deletions(-) diff --git a/templates/services.json b/templates/services.json index 723d6be..fb7cd7d 100644 --- a/templates/services.json +++ b/templates/services.json @@ -188,11 +188,14 @@ "statusCode": 200, "detectionFingerprints": [ "Sign in [Jenkins]", - "Signup not supported [Jenkins]" + "Signup not supported [Jenkins]", + "Register [Jenkins]" ], "fingerprints": [ "Sign up [Jenkins]", - "If you already have a Jenkins account, " + "Register [Jenkins]", + "Create an account! [Jenkins]", + "If you already have a Jenkins account," ] }, "metadata": { @@ -526,7 +529,7 @@ "Observe the response manually and further enumerate global and custom Salesforce Objects. View the references for more information." ], "references": [ - "https://bugology.intigriti.io/misconfig-mapper-docs/services/salesforce/salesforce-lightning-aura-component-enabled", + "https://bugology.intigriti.io/misconfig-mapper-docs/services/salesforce/salesforce-lightning-aura-components-enabled", "https://www.enumerated.ie/index/salesforce", "https://www.enumerated.ie/index/salesforce-lightning-tinting-the-windows", "https://infosecwriteups.com/in-simple-words-pen-testing-salesforce-saas-application-part-1-the-essentials-ffae632a00e5", From afd84568ca67089b3df8827f5bbf3e2c43a767fb Mon Sep 17 00:00:00 2001 From: 0xblackbird Date: Thu, 11 Jul 2024 07:36:59 +0200 Subject: [PATCH 2/2] feat: Improved template fingerprints for Jenkins --- main.go | 2 -- templates/services.json | 12 ++++++------ 2 files changed, 6 insertions(+), 8 deletions(-) diff --git a/main.go b/main.go index 03711b3..848ef84 100644 --- a/main.go +++ b/main.go @@ -318,8 +318,6 @@ func checkResponse(result *Result, service *Service, r *RequestContext) { return } - req = req.WithContext(ctx) - if len(service.Request.Headers) > 0 { for _, header := range service.Request.Headers { for key, value := range header { diff --git a/templates/services.json b/templates/services.json index fb7cd7d..d5a97cf 100644 --- a/templates/services.json +++ b/templates/services.json @@ -187,14 +187,14 @@ "response": { "statusCode": 200, "detectionFingerprints": [ - "Sign in [Jenkins]", - "Signup not supported [Jenkins]", - "Register [Jenkins]" + "Sign in \\[Jenkins\\]", + "Signup not supported \\[Jenkins\\]", + "Register \\[Jenkins\\]" ], "fingerprints": [ - "Sign up [Jenkins]", - "Register [Jenkins]", - "Create an account! [Jenkins]", + "Sign up \\[Jenkins\\]", + "Register \\[Jenkins\\]", + "Create an account! \\[Jenkins\\]", "If you already have a Jenkins account," ] },