Skip to content

All cloud credential stuffing templates with extracted variables are not working correctly #5037

@alittleninjaspam

Description

@alittleninjaspam

Nuclei version:

v3.2.4 (latest)

Current Behavior:

None of the cloud credential stuffing templates containing variables extracted from requests are working. It appears that nuclei couldn't properly retrieve the variables from the extractors.

Expected Behavior:

The templates seems to have the correct extractors logic, therefore they should work.

Steps To Reproduce:

  1. Run nuclei -var [email protected] -var password=test123 -id datadog-login-check -debug
  2. Observe the response.
    poc_nuclei_1

Additional Information

The logic of the extractor seems to be correct.

template_extractor

site_response

This issue may be related with #5017 and the recent resolved issue #5016 (which doesn't fix this and other cases)

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type: BugInconsistencies or issues which will cause an issue or problem for users or implementors.

    Type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions