From d303fb3e196923a78a8cf8744ec7fd9f282b8d10 Mon Sep 17 00:00:00 2001 From: liquidsec Date: Mon, 11 Aug 2025 11:53:51 -0400 Subject: [PATCH] fixing TestNucleiSevere --- .../test_step_2/module_tests/test_module_nuclei.py | 13 ++++++++----- 1 file changed, 8 insertions(+), 5 deletions(-) diff --git a/bbot/test/test_step_2/module_tests/test_module_nuclei.py b/bbot/test/test_step_2/module_tests/test_module_nuclei.py index 24638b4b86..1c200b2aee 100644 --- a/bbot/test/test_step_2/module_tests/test_module_nuclei.py +++ b/bbot/test/test_step_2/module_tests/test_module_nuclei.py @@ -67,21 +67,24 @@ class TestNucleiSevere(TestNucleiManual): "nuclei": { "mode": "severe", "concurrency": 1, - "templates": "/tmp/.bbot_test/tools/nuclei-templates/vulnerabilities/generic/generic-linux-lfi.yaml", + "templates": "/tmp/.bbot_test/tools/nuclei-templates/vulnerabilities/generic/generic-env.yaml", } }, "interactsh_disable": True, } async def setup_after_prep(self, module_test): - expect_args = {"method": "GET", "uri": "/etc/passwd"} - respond_args = {"response_data": "root:.*:0:0:"} + expect_args = {"method": "GET", "uri": "/.env"} + respond_args = {"response_data": "AAAKEYBBB="} + module_test.set_expect_requests(expect_args=expect_args, respond_args=respond_args) + + expect_args = {"method": "GET", "uri": "/"} + respond_args = {"response_data": "alive"} module_test.set_expect_requests(expect_args=expect_args, respond_args=respond_args) def check(self, module_test, events): assert any( - e.type == "VULNERABILITY" and "Generic Linux - Local File Inclusion" in e.data["description"] - for e in events + e.type == "VULNERABILITY" and "Generic Env File Disclosure" in e.data["description"] for e in events )