TigahandGitHub 294bfb090b feat(modules): add host-header injection and xxe probe modules (#277) ...

* feat(modules): add host-header injection and xxe probe modules

host-header-injection sets an rfc 2606 .invalid marker in the forwarded-host
headers and fires only when it comes back inside an absolute-url construct
(href/src/action/content/url), so a benign echo into text or an attribute cannot
trigger it. xxe-error-based expands a SYSTEM entity pointing at a local file and
matches only that file's contents, so an echo of the payload (a path string)
cannot satisfy it.

* chore(modules): trim redundant module header comments

drop the leading comment restating id/name on host-header-injection and xxe-error-based

2026-07-22 12:35:51 -07:00

..

command-injection.yaml

feat(modules): add active web-vuln probe modules (#271)

2026-07-22 12:35:27 -07:00

graphql-introspection.yaml

feat(modules): add graphql introspection detection module (#139)

2026-06-22 17:53:28 -07:00

host-header-injection.yaml

feat(modules): add host-header injection and xxe probe modules (#277)

2026-07-22 12:35:51 -07:00

ldap-injection-error.yaml

feat(modules): add active web-vuln probe modules (#271)

2026-07-22 12:35:27 -07:00

lfi-basic.yaml

feat: add built-in yaml modules for security scanning

2026-01-03 05:57:10 -08:00

nosql-injection-error.yaml

feat(modules): add active web-vuln probe modules (#271)

2026-07-22 12:35:27 -07:00

sqli-error.yaml

feat: add built-in yaml modules for security scanning

2026-01-03 05:57:10 -08:00

ssti-reflected.yaml

feat(modules): add active web-vuln probe modules (#271)

2026-07-22 12:35:27 -07:00

xpath-injection-error.yaml

feat(modules): add active web-vuln probe modules (#271)

2026-07-22 12:35:27 -07:00

xss-reflected.yaml

feat: add built-in yaml modules for security scanning

2026-01-03 05:57:10 -08:00

xxe-error-based.yaml

feat(modules): add host-header injection and xxe probe modules (#277)

2026-07-22 12:35:51 -07:00