mirror of
https://github.com/projectdiscovery/nuclei
synced 2026-06-08 16:50:47 +00:00
Dwi Siswanto
25 lines
983 B
YAML
25 lines
983 B
YAML
id: net-https-timeout
|
|
|
|
info:
|
|
name: Example Network template which times out
|
|
author: pdteam
|
|
severity: high
|
|
description: Example Network template to send HTTPS request which times out
|
|
|
|
|
|
tcp:
|
|
- host:
|
|
- "tls://{{Hostname}}"
|
|
port: 443
|
|
inputs:
|
|
# noticable difference between this and net-https.yaml is that here we don't send the Connection: close header
|
|
# and hence connection will remain open until server closes it. This can be a DOS vector in nuclei
|
|
# as it waits for server to close the connection. now we have set a default timeout of 5 seconds and if server responds but doesn't close the connection
|
|
# then nuclei will close connection but doesn't fail the request since we already have response data from server
|
|
# this feature is only required for `read-all: true` to work properly
|
|
- data: "GET / HTTP/1.1\r\nHost: {{Hostname}}\r\n\r\n"
|
|
read-all: true
|
|
extractors:
|
|
- type: dsl
|
|
dsl:
|
|
- "len(data)" |