Add HaE regular expressions.
This commit is contained in:
parent
0140f688f5
commit
ef8e5efdc8
|
|
@ -26,6 +26,10 @@ I will use http.txt to see if there is any content there.
|
||||||
|
|
||||||
Sometimes I may use it recursively.
|
Sometimes I may use it recursively.
|
||||||
|
|
||||||
|
## hae.txt
|
||||||
|
|
||||||
|
A bunch of regular expressions I use with the [HaE extension](https://github.com/gh0stkey/HaE). This may be a bit redudant now with the release of [Burp BChecks](https://github.com/PortSwigger/BChecks). The regular expressions themselves are still useful.
|
||||||
|
|
||||||
## objects.txt
|
## objects.txt
|
||||||
|
|
||||||
I generally use this if I find some sort of API/RPC type endpoint like /api to discover the resources that the API can interact with.
|
I generally use this if I find some sort of API/RPC type endpoint like /api to discover the resources that the API can interact with.
|
||||||
|
|
|
||||||
|
|
@ -0,0 +1,11 @@
|
||||||
|
(graphql\?\w+|\s*\"variables\"\:\{)
|
||||||
|
operation\:\"query\"\,\w+\:\{\w+\:\"Name\"\,\w+\:\"(\w+)\"\}
|
||||||
|
(api|\/api\/|\/v[1-10]\/|\/\d*\.\d*\/)
|
||||||
|
\_\_schema\s+\{
|
||||||
|
kind\:\"Operation\"\,name\:\"(\w+)\"
|
||||||
|
query\s+(\b[A-Z]\w+)\(
|
||||||
|
graphql\/.*(\b[A-Z]\w+)\s+
|
||||||
|
\"queryName\"\:\"(\w+)\"
|
||||||
|
\"operationName\"\:\"(\w+)\"
|
||||||
|
\/\:type\/
|
||||||
|
query\s+(\b[A-Z]\w+)
|
||||||
Loading…
Reference in New Issue