@@ -93,18 +93,19 @@ The below table shows some examples of how you might structure your exclusion fo
93
93
| Request body | RequestArgNames | EqualsAny | "" | Request body: ` {"key1": ".zshrc", "key2":"sleep(5)"} ` | ` .zshrc ` and ` sleep(5) ` |
94
94
| Request body | RequestArgValues | Equals | ` test ` | Request body: ` {"test": ".zshrc"} ` | ` .zshrc ` |
95
95
| Request body | RequestArgValues | EqualsAny | "" | Request body: ` {"key1": ".zshrc", "key2":"sleep(5)"} ` | ` .zshrc ` and ` sleep(5) ` |
96
- | Header | RequestHeaderKeys | Equals | ` X-Scanner ` | Header: ` {k: "X-Scanner", v: "test"} ` | ` X-scanner ` |
97
- | Header | RequestHeaderKeys | EqualsAny | "" | Header: ` {k: "X-Scanner", v: "test"},{k: "x-ratproxy-loop", v: "value"} ` | ` X-Scanner ` and ` x-ratproxy-loop ` |
98
- | Header | RequestHeaderNames | Equals | ` head1 ` | Header: ` {k: "head1", v: "X-Scanner"} ` | ` X-scanner ` |
99
- | Header | RequestHeaderNames | EqualsAny | "" | Header: ` {k: "head1", v: "myvar=1234"},{k: "User-Agent", v: "(hydra)"} ` | ` myvar=1234 ` and ` (hydra) ` |
100
- | Header | RequestHeaderValues | Equals | ` head1 ` | Header: ` {k: "head1", v: "X-Scanner"} ` | ` X-scanner ` |
101
- | Header | RequestHeaderValues | EqualsAny | "" | Header: ` {k: "head1", v: "myvar=1234"},{k: "User-Agent", v: "(hydra)"} ` | ` myvar=1234 ` and ` (hydra) ` |
102
- | Cookie | RequestCookieKeys | Contains | ` /etc/passwd ` | Header: ` {k: "Cookie", v: "/etc/passwdtest=hello1"} ` | ` /etc/passwdtest ` |
103
- | Cookie | RequestCookieKeys | EqualsAny | "" | Header: ` {k: "Cookie", v: "/etc/passwdtest=hello1"},{k: "Cookie", v: ".htaccess=test1} ` | ` /etc/passwdtest ` and ` .htaccess ` |
104
- | Cookie | RequestCookieNames | Equals | ` arg1 ` | Header: ` {k: "Cookie", v: "arg1=/etc/passwd"} ` | ` /etc/passwd ` |
105
- | Cookie | RequestCookieNames | EqualsAny | "" | Header: ` {k: "Cookie", v: "arg1=/etc/passwd"},{k: "Cookie", v: "arg1=.cshrc"} ` | ` /etc/passwd ` and ` .cshrc ` |
106
- | Cookie | RequestCookieValues | Equals | ` arg1 ` | Header: ` {k: "Cookie", v: "arg1=/etc/passwd"} ` | ` /etc/passwd ` |
107
- | Cookie | RequestCookieValues | EqualsAny | "" | Header: ` {k: "Cookie", v: "arg1=/etc/passwd"},{k: "Cookie", v: "arg1=.cshrc"} ` | ` /etc/passwd ` and ` .cshrc ` |
96
+ | Header | RequestHeaderKeys | Equals | ` X-Scanner ` | Header: ` {"X-Scanner": "test"} ` | ` X-scanner ` |
97
+ | Header | RequestHeaderKeys | EqualsAny | "" | Header: ` {"X-Scanner": "test", "x-ratproxy-loop": "value"} ` | ` X-Scanner ` and ` x-ratproxy-loop ` |
98
+ | Header | RequestHeaderNames | Equals | ` head1 ` | Header: ` {"head1": "X-Scanner"} ` | ` X-scanner ` |
99
+ | Header | RequestHeaderNames | EqualsAny | "" | Header: ` {"head1": "myvar=1234", "User-Agent": "(hydra)"} ` | ` myvar=1234 ` and ` (hydra) ` |
100
+ | Header | RequestHeaderValues | Equals | ` head1 ` | Header: ` {"head1": "X-Scanner"} ` | ` X-scanner ` |
101
+ | Header | RequestHeaderValues | EqualsAny | "" | Header: ` {"head1": "myvar=1234", "User-Agent": "(hydra)"} ` | ` myvar=1234 ` and ` (hydra) ` |
102
+ | Cookie | RequestCookieKeys | Contains | ` /etc/passwd ` | Header: ` {"Cookie": "/etc/passwdtest=hello1"} ` | ` /etc/passwdtest ` |
103
+ | Cookie | RequestCookieKeys | EqualsAny | "" | Header: ` {"Cookie": "/etc/passwdtest=hello1", "Cookie": ".htaccess=test1"} ` | ` /etc/passwdtest ` and ` .htaccess ` |
104
+ | Cookie | RequestCookieNames | Equals | ` arg1 ` | Header: ` {"Cookie": "arg1=/etc/passwd"} ` | ` /etc/passwd ` |
105
+ | Cookie | RequestCookieNames | EqualsAny | "" | Header: ` {"Cookie": "arg1=/etc/passwd", "Cookie": "arg1=.cshrc"} ` | ` /etc/passwd ` and ` .cshrc ` |
106
+ | Cookie | RequestCookieValues | Equals | ` arg1 ` | Header: ` {"Cookie": "arg1=/etc/passwd"} ` | ` /etc/passwd ` |
107
+ | Cookie | RequestCookieValues | EqualsAny | "" | Header: ` {"Cookie": "arg1=/etc/passwd", "Cookie": "arg1=.cshrc"} ` | ` /etc/passwd ` and ` .cshrc ` |
108
+
108
109
109
110
## Exclusion scopes
110
111
0 commit comments