You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Hi, I got an error when start BCheck script, The strange thing is that there were no problems before, all scripts ran normally, but when a scan task unexpectedly paused, the problem suddenly appeared after I deleted the task and re-created the scan task.I tried recreating the scan task but the result is the same。
And I found that the scripts with errors all used the given insertion point then statement, and there were no errors in other scripts.And there is no problem with BChecks editor verification。
The sample script is as follows
metadata:
language: v2-beta
name: "SSRF"
description: "SSRF Check"
author: "nbxiglk"
define:
ssrf_addr=`https://{generate_collaborator_address()}/ssrftest`
# we will automatically insert into nested insertion points
given insertion point then
# prevent false positives by checking answer isn't
# already in base response
if {insertion_point_base_value} matches "http" then
send payload:
replacing: {ssrf_addr}
if any interactions then
report issue:
severity: high
confidence: tentative
detail: "The application transforms input in a way that suggests it might be
vulnerable to some kind of server-side code injection."
remediation: "Manual investigation is advised."
end if
end if
metadata:
language: v2-beta
name: "NoSQL Bool Base SQL Inject"
description: "NoSQL Bool Base SQL Inject"
author: "nbxiglk"
define:
fcheckpl="' && 0 && 'x"
scheckpl="' && 1 && 'x"
# we will automatically insert into nested insertion points
given insertion point then
send request called fcheck:
send payload:
appending: {fcheckpl}
if not({latest.response.body} is {base.response.body}) then
send request called scheck:
send payload:
appending: {scheckpl}
if {latest.response.body} is {base.response.body} then
report issue:
severity: high
confidence: firm
detail: `NoSQL SQL Inject with {insertion_point_base_value}`
remediation: "Manual investigation is advised."
end if
end if
The text was updated successfully, but these errors were encountered:
To help us investigate this, can you please go to Settings > Suite > Performance feedback and send us the Debug ID? Or send an email to [email protected] with the output from Help > Diagnostics for the installation of Burp where you had this problem?
Hi, I got an error when start BCheck script, The strange thing is that there were no problems before, all scripts ran normally, but when a scan task unexpectedly paused, the problem suddenly appeared after I deleted the task and re-created the scan task.I tried recreating the scan task but the result is the same。
And I found that the scripts with errors all used the given insertion point then statement, and there were no errors in other scripts.And there is no problem with BChecks editor verification。
The sample script is as follows
The text was updated successfully, but these errors were encountered: