[Bug] Template generic-blind-xxe wrong raw definition

[derekkddj]

The original template is:

id: generic-blind-xxe

info:
  name: Generic Blind XXE
  author: geeknik
  severity: high
  description: This template detects Generic Blind XXE.
  metadata:
    max-request: 1
  tags: xxe,generic,blind

http:
  - raw:
      - |
        POST / HTTP/1.1
        Host: {{Hostname}}

But acording to documentation: https://docs.projectdiscovery.io/templates/protocols/http/raw-http

It should be:

id: generic-blind-xxe

info:
  name: Generic Blind XXE
  author: geeknik
  severity: high
  description: This template detects Generic Blind XXE.
  metadata:
    max-request: 1
  tags: xxe,generic,blind

http:
  - raw:
      - |
        POST  HTTP/1.1
        Host: {{Hostname}}

With the original template nuclei always add a trailing slash to every URL. www.target.com/wii -> www.target.com/wii/

And is not the intended operation.

[ehsandeep]

@dhd0004 there is bug in nuclei engine that is being fixed here - https://github.com/projectdiscovery/nuclei/pull/4955

[derekkddj]

but in that bug they were using "unsafe:true", not in this template EDIT: sorry, i saw there was a bug referenced https://github.com/projectdiscovery/nuclei/issues/4921