提交指纹-[sentry]

[j4vaovo]

测试目标

https://sentry.allsafe.3mk.pl/

指纹的Yaml规则

name: sentry
priority: 3
nuclei_tags:
 - - sentry
fingerprint:
 - path: /
   request_method: get
   request_headers: {}
   request_data: ''
   status_code: 0
   headers: {}
   keyword:
     - '<title>Sign In | Sentry</title>'
   favicon_hash: []
 - path: /
   request_method: get
   request_headers: {}
   request_data: ''
   status_code: 0
   headers: {}
   keyword:
     - 'Sentry.ConfigStore.loadInitialData({'
   favicon_hash: []
 - path: /
   request_method: get
   request_headers: {}
   request_data: ''
   status_code: 0
   headers: {}
   keyword: []
   favicon_hash:
     - 415ab63d14960e66d7f026d1adcdd2f4

[github-actions[bot]]

验证过程:

点击展开查看

```bash URL: https://sentry.allsafe.3mk.pl/ HEADERS: server: nginx/1.18.0 (Ubuntu) date: Thu, 26 Oct 2023 12:27:51 GMT content-type: text/html; charset=utf-8 content-length: 0 connection: keep-alive location: /auth/login/ x-robots-tag: noindex, nofollow vary: Accept-Language, Cookie content-language: en x-frame-options: deny x-content-type-options: nosniff x-xss-protection: 1; mode=block set-cookie: sentrysid=gAJ9cQBYBQAAAF9uZXh0cQFYAQAAAC9xAnMu:1qvzSp:bDpnVpALEx1y_c3ynQpqqSTYPXw; expires=Thu, 09 Nov 2023 12:27:51 GMT; HttpOnly; Max-Age=1209600; Path=/ COOKIES: sentrysid=gAJ9cQBYBQAAAF9uZXh0cQFYAQAAAC9xAnMu:1qvzSp:bDpnVpALEx1y_c3ynQpqqSTYPXw; expires=Thu, 09 Nov 2023 12:27:51 GMT; HttpOnly; Max-Age=1209600; Path=/ STATUS_CODE: 302 TEXT: NEXT_URL: https://sentry.allsafe.3mk.pl/auth/login/ URL: https://sentry.allsafe.3mk.pl/auth/login/ HEADERS: server: nginx/1.18.0 (Ubuntu) date: Thu, 26 Oct 2023 12:27:52 GMT content-type: text/html; charset=utf-8 content-length: 0 connection: keep-alive location: /auth/login/sentry/ expires: Thu, 26 Oct 2023 12:27:52 GMT cache-control: max-age=0, no-cache, no-store, must-revalidate vary: Accept-Language, Cookie content-language: en x-frame-options: deny x-content-type-options: nosniff x-xss-protection: 1; mode=block set-cookie: sentrysid=gAJ9cQBYCgAAAHRlc3Rjb29raWVxAVgGAAAAd29ya2VkcQJzLg:1qvzSq:QqfaPIspmxJpr_El2dwZeSxekVo; expires=Thu, 09 Nov 2023 12:27:52 GMT; HttpOnly; Max-Age=1209600; Path=/ COOKIES: sentrysid=gAJ9cQBYCgAAAHRlc3Rjb29raWVxAVgGAAAAd29ya2VkcQJzLg:1qvzSq:QqfaPIspmxJpr_El2dwZeSxekVo; expires=Thu, 09 Nov 2023 12:27:52 GMT; HttpOnly; Max-Age=1209600; Path=/ STATUS_CODE: 302 TEXT: NEXT_URL: https://sentry.allsafe.3mk.pl/auth/login/sentry/ URL: https://sentry.allsafe.3mk.pl/auth/login/sentry/ HEADERS: server: nginx/1.18.0 (Ubuntu) date: Thu, 26 Oct 2023 12:27:53 GMT content-type: text/html transfer-encoding: chunked connection: keep-alive expires: Thu, 26 Oct 2023 12:27:53 GMT cache-control: max-age=0, no-cache, no-store, must-revalidate vary: Accept-Language, Cookie content-language: en x-frame-options: deny x-content-type-options: nosniff x-xss-protection: 1; mode=block set-cookie: sc=pil2KJRbi17llYYbfYhqwS2X5sEJG3n36mKgHU5ATsFmIRxBIcOi1ylqARxDKP9x; expires=Thu, 24 Oct 2024 12:27:53 GMT; Max-Age=31449600; Path=/; SameSite=Lax COOKIES: sc=pil2KJRbi17llYYbfYhqwS2X5sEJG3n36mKgHU5ATsFmIRxBIcOi1ylqARxDKP9x; expires=Thu, 24 Oct 2024 12:27:53 GMT; Max-Age=31449600; Path=/; SameSite=Lax sentrysid=gAJ9cQBYCgAAAHRlc3Rjb29raWVxAVgGAAAAd29ya2VkcQJzLg:1qvzSr:Ph_Feth-ZEtMulYDSsu0Sxydf_g; expires=Thu, 09 Nov 2023 12:27:53 GMT; HttpOnly; Max-Age=1209600; Path=/ STATUS_CODE: 200 TEXT:

sentry

• sign in
• request to join

account*

password*

sign in lost your password?

register privacy policy

FAVICON: { "https://sentry.allsafe.3mk.pl/_static/1698266389/sentry/images/favicon.png": "415ab63d14960e66d7f026d1adcdd2f4", } Matching fingerprintV3WebFingerPrint { name: "sentry", priority: 3, request: WebFingerPrintRequest { path: "/", request_method: "get", request_headers: {}, request_data: "", }, match_rules: WebFingerPrintMatch { status_code: 0, favicon_hash: [], headers: {}, keyword: [ "", ], }, } Matching fingerprintV3WebFingerPrint { name: "sentry", priority: 3, request: WebFingerPrintRequest { path: "/", request_method: "get", request_headers: {}, request_data: "", }, match_rules: WebFingerPrintMatch { status_code: 0, favicon_hash: [ "415ab63d14960e66d7f026d1adcdd2f4", ], headers: {}, keyword: [], }, } ```

验证结果：

• 是否识别成功： true