Hi, so in this lesson we are
going to understand about simple get based
matcher.
Here we are going to see how you can write
your quick template that can match something
in the body of your bug Bounty
program or the Target that you're going to send a request
on.
So as you can see on the screen right
now, here's an sample get paste
matcher in the body.
Let us see practically how we can
also do this.
So I have written a template that I'm going to use right now that
you can see in front of you. I have given the name to
the template as simple get.yml as you
can see over here.
This is the ID block.
Next is the info block then the request block which
says that the request type is get request which
is going to a specific endpoint, which is nuclei testing
header.php.
There's a mattress condition and I'm saying I want to
match a word type and the words is going to be apple the
condition is and which means there is
one more matching condition that should be matched for
a successful output which is a
status code and the status that I want to match is 200, okay?
Let's save this and let's run this template.
Before we run this let me go to my browser and
you can see onto this specific endpoint which is
nuclei testing header.php. There is
something written which is Apple in the body. So this
should get matched.
I'm going to quickly run.
Nuclei now with the template
that we have written on the Target that
we have just created and we will
also send this request via the proxy that
we have configured with burpsuit. I'm
going to hit enter and let's wait for
this to run.
You can see the template was
successfully run without any errors and
you can see one template was loaded.
We are also able to match this which means this was
successful.
As you can see over here.
Let's run this once more with hyphen V.
And you can see it was again successful for when
HTTP request was sent.
Let's go to burp suit and let's see what happened in
pop suit exactly.
So you can see the latest request that we
have sent in which you can see HTTP method
get was used to send a request
to this specific endpoint and you can see in the
response apple and we are exactly matching these
same thing in our template as
well as can be seen over here.
So I hope you guys understood how you can
write a quick template in which a simple
get based matcher can be performed in the body. Thank
you.