Merge pull request #9690 from x676f64/main

Fix regex matcher and extractor to match only rfc1918 addresses
projectdiscovery · May 11, 2024 · 7079b58 · 7079b58
2 parents 7202657 + 5c88c9f
commit 7079b58
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/http/misconfiguration/internal-ip-disclosure.yaml b/http/misconfiguration/internal-ip-disclosure.yaml
@@ -29,7 +29,7 @@ http:
       - type: regex
         part: location
         regex:
-          - '([0-9]{1,3}[\.]){3}[0-9]{1,3}'
+          - '^(10(?:\.\d{1,3}){3}|192\.168(?:\.\d{1,3}){2}|172\.(?:1[6-9]|2\d|3[0-1])(?:\.\d{1,3}){2})$'
 
       - type: dsl
         dsl:
@@ -44,6 +44,6 @@ http:
       - type: regex
         part: location
         regex:
-          - '([0-9]{1,3}[\.]){3}[0-9]{1,3}'
+          - '^(10(?:\.\d{1,3}){3}|192\.168(?:\.\d{1,3}){2}|172\.(?:1[6-9]|2\d|3[0-1])(?:\.\d{1,3}){2})$'
 
 # digest: 4a0a00473045022100be01acb985c09c3394bcce936ba1cc283802b1069e6fcc5f63196c772bd55f5a02207165d8ff2b202e511f03d2c75a241b2f933b85b3993f668651c3db8216243382:922c64590222798bb761d5b6d8e72950