Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

All cloud credential stuffing templates with extracted variables are not working correctly #5037

Open
alittleninjaspam opened this issue Apr 12, 2024 · 0 comments
Labels
Type: Bug Inconsistencies or issues which will cause an issue or problem for users or implementors.

Comments

@alittleninjaspam
Copy link

Nuclei version:

v3.2.4 (latest)

Current Behavior:

None of the cloud credential stuffing templates containing variables extracted from requests are working. It appears that nuclei couldn't properly retrieve the variables from the extractors.

Expected Behavior:

The templates seems to have the correct extractors logic, therefore they should work.

Steps To Reproduce:

  1. Run nuclei -var [email protected] -var password=test123 -id datadog-login-check -debug
  2. Observe the response.
    poc_nuclei_1

Additional Information

The logic of the extractor seems to be correct.

template_extractor

site_response

This issue may be related with #5017 and the recent resolved issue #5016 (which doesn't fix this and other cases)

@alittleninjaspam alittleninjaspam added the Type: Bug Inconsistencies or issues which will cause an issue or problem for users or implementors. label Apr 12, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Type: Bug Inconsistencies or issues which will cause an issue or problem for users or implementors.
Projects
None yet
Development

No branches or pull requests

1 participant