ssti submodule tweak

blacklanternsecurity · Nov 28, 2024 · 0510ee0 · 0510ee0
1 parent 2971eb6
commit 0510ee0
Showing 1 changed file with 4 additions and 4 deletions.
diff --git a/bbot/modules/lightfuzz_submodules/ssti.py b/bbot/modules/lightfuzz_submodules/ssti.py
@@ -5,14 +5,14 @@ class SSTILightfuzz(BaseLightfuzz):
     async def fuzz(self):
 
         cookies = self.event.data.get("assigned_cookies", {})
-        ssti_probes = ["<%25%3d%201337*1337%20%25>","<%= 1337*1337 %>", "${1337*1337}"]
+        ssti_probes = ["<%25%3d%201337*1337%20%25>","<%= 1337*1337 %>", "${1337*1337}", "%24%7b1337*1337%7d"]
         for probe_value in ssti_probes:
-            r = await self.standard_probe(self.event.data["type"], cookies, probe_value, allow_redirects=True)            
-            if r and "1787569" in r.text or "1,787,569" in r.text:
+            r = await self.standard_probe(self.event.data["type"], cookies, probe_value, allow_redirects=True)      
+            if r and ("1787569" in r.text or "1,787,569" in r.text):
                 self.results.append(
                     {
                         "type": "FINDING",
-                        "description": f"POSSIBLE Server-side Template Injection. {self.metadata()} Detection Method: [Integer Multiplication]",
+                        "description": f"POSSIBLE Server-side Template Injection. {self.metadata()} Detection Method: [Integer Multiplication] Payload: [{probe_value}]",
                     }
                 )
                 break