Add HaE regular expressions.
This commit is contained in:
parent
0140f688f5
commit
ef8e5efdc8
|
|
@ -26,6 +26,10 @@ I will use http.txt to see if there is any content there.
|
|||
|
||||
Sometimes I may use it recursively.
|
||||
|
||||
## hae.txt
|
||||
|
||||
A bunch of regular expressions I use with the [HaE extension](https://github.com/gh0stkey/HaE). This may be a bit redudant now with the release of [Burp BChecks](https://github.com/PortSwigger/BChecks). The regular expressions themselves are still useful.
|
||||
|
||||
## objects.txt
|
||||
|
||||
I generally use this if I find some sort of API/RPC type endpoint like /api to discover the resources that the API can interact with.
|
||||
|
|
|
|||
|
|
@ -0,0 +1,11 @@
|
|||
(graphql\?\w+|\s*\"variables\"\:\{)
|
||||
operation\:\"query\"\,\w+\:\{\w+\:\"Name\"\,\w+\:\"(\w+)\"\}
|
||||
(api|\/api\/|\/v[1-10]\/|\/\d*\.\d*\/)
|
||||
\_\_schema\s+\{
|
||||
kind\:\"Operation\"\,name\:\"(\w+)\"
|
||||
query\s+(\b[A-Z]\w+)\(
|
||||
graphql\/.*(\b[A-Z]\w+)\s+
|
||||
\"queryName\"\:\"(\w+)\"
|
||||
\"operationName\"\:\"(\w+)\"
|
||||
\/\:type\/
|
||||
query\s+(\b[A-Z]\w+)
|
||||
Loading…
Reference in New Issue