Added external-service-interaction Template

[andreluna]

Template / PR Information

• Validation for External Service interaction via Host Header Injection
• References:
  • https://portswigger.net/kb/issues/00300210_external-service-interaction-http
  • https://success.qualys.com/support/s/article/000006843
  • https://owasp.org/www-project-web-security-testing-guide/latest/4-Web_Application_Security_Testing/07-Input_Validation_Testing/17-Testing_for_Host_Header_Injection

Template Validation

I've validated this template locally?

• YES
• NO

Additional Details (leave it blank if not applicable)

Additional References:

• Nuclei Template Creation Guideline
• Nuclei Template Matcher Guideline
• Nuclei Template Contribution Guideline
• PD-Community Discord server

[princechaddha]

Hello @andreluna, thank you so much for sharing this template with the community and contributing to this project 🍻

We already have a template for this check here. Let me know if you believe this template is performing a different check. If so, we can proceed with updating the current template with additional request.

You can join our discord server. It's a great place to connect with fellow contributors and stay updated with the latest developments. Thank you once again

[andreluna]

Hello @andreluna, thank you so much for sharing this template with the community and contributing to this project 🍻

We already have a template for this check here. Let me know if you believe this template is performing a different check. If so, we can proceed with updating the current template with additional request.

You can join our discord server. It's a great place to connect with fellow contributors and stay updated with the latest developments. Thank you once again

Hello @princechaddha . I understand the reference you provided, but the template I sent is directly related to the verification that Qualys performs and not with a proxy in apache2.

See is example:

~/templates/ nuclei -id open-proxy-external -u http://catpcha.nsa.gov -silent (no results)
~/templates/ nuclei -t external-service-interaction.yaml -u http://captcha.nsa.gov -silent (results)
[external-service-interaction] [http] [medium] http://captcha.nsa.gov/

[andreluna]

Hello @andreluna, thank you so much for sharing this template with the community and contributing to this project 🍻
We already have a template for this check here. Let me know if you believe this template is performing a different check. If so, we can proceed with updating the current template with additional request.
You can join our discord server. It's a great place to connect with fellow contributors and stay updated with the latest developments. Thank you once again

Hello @princechaddha . I understand the reference you provided, but the template I sent is directly related to the verification that Qualys performs and not with a proxy in apache2.

See is example:

~/templates/ nuclei -id open-proxy-external -u http://catpcha.nsa.gov -silent (no results)
~/templates/ nuclei -t external-service-interaction.yaml -u http://captcha.nsa.gov -silent (results)
[external-service-interaction] [http] [medium] http://captcha.nsa.gov/

@princechaddha this template be published? What should I do now?

[princechaddha]

Hello @andreluna, You are right; both templates check for separate issues. I have changed the severity to "info," as in most cases, this issue can't be escalated, and there would mostly be just DNS interaction. Let me know if you think otherwise.

[andreluna]

Hello @andreluna, You are right; both templates check for separate issues. I have changed the severity to "info," as in most cases, this issue can't be escalated, and there would mostly be just DNS interaction. Let me know if you think otherwise.

Alright, I put it as a medium because Qualys considers it that way. But I agree that it is difficult to escalete.

[andreluna]

Hello @princechaddha

Was my template removed from the repository?

[ritikchaddha]

Hello there, @andreluna. Yes, your template was removed by this commit 7efb971, but we restored it via PR #8200.

[andreluna]

Hello there, @andreluna. Yes, your template was removed by this commit 7efb971, but we restored it via PR #8200.

Okay, very thanks!