Hi everyone. So in this lesson we are
going to learn about simple get based
matches in the header.
As we can see on your screen. We have a sample template
in which we can see. This is a simple get
based matcher.
Template which matches something in the header value
from here as we can see the matches
condition specify and matches
type is a word which is Apple which is
in the header.
And there's a condition and one more which says to match a
status code, which is 200, okay?
So it is the Practical time and let's quickly see this.
So I have already written a template. So I'm going
to show you that template real quick.
As you can see over here. This is the template of
simple get based matcher, which is specified in
the ID block second block is
the information block as we can see over here, which
also specifies the basic detail
about the template.
the next part is the request Block in which
we can see we are sending a get based request to
a path of the base URL that has been supplied
as a input to a endpoint which is nuclei testing
header.php and the
final part of the matches condition with a
match as condition as and matches type word
matching Apple, but this time not in
the body instead in the header and successfully
matching a status code 200 okay
to give us output
So let us see this so for testing we're going
to use this specific Target.
Let's go back to our terminal and let's specify this.
so
we will quickly change our template.
Which is simple get header dot.
Yml, as you can see we are supplying nuclei
and the target URL the
template also have been specified over here and
we are passing this request wire proxy. We
can also see we have added a flag
which is hyphen V with stand for verbose output.
Let's hit enter.
And you can see we were successfully able to match and
get an output over here, which means
the matching condition was successful.
Let's quickly go in burp, and let's
see the request that was sent.
Let's go in the HTTP history and let's pick
the last request that was sent.
We can see over here are get request is sent nothing
in the body.
As we can see over here. The header name is
new header and the value of which is Apple and
which has been successfully matched. Let's go
back over here and see we can
confirm. The matching condition was successful. If
you also specify hyphen debug you
would be able to see that as well that Apple has
been matched successfully in the
new header value that has been supplied. So
this template Works, absolutely fine. I'm matching
the header as well as the status code.
So I hope you guys understood that how you
can also write a simple get based matcher
header template. Thank you.