blind_xss_header.yaml

id: header-blind-xss-injection

info:
  name: Header BlindXSS Injection
  author: MRiambatman
  severity: high
  description: Fuzzing headers for blindxss 

requests:
  - raw:
      - |
        GET / HTTP/1.1
        Host: {{Hostname}}
        §header§: §payload§

      - |
        POST / HTTP/1.1
        Host: {{Hostname}}
        §header§: §payload§

      - |
        PUT / HTTP/1.1
        Host: {{Hostname}}
        §header§: §payload§

      - |
        TRACE / HTTP/1.1
        Host: {{Hostname}}
        §header§: §payload§
     
    payloads:
      header: helpers/payloads/request-headers.txt
      payload: helpers/payloads/command-injection.txt
    attack: pitchfork
    redirects: true
    matchers:
      - type: word
        words:
          - "*.xss.ht"
        part: body