Revert clustering changes for templates using flow

Templates using flow directive are not considered for clustering, so these changes are reverted to keep the original raw HTTP format. Non-flow templates retain the clustering optimization.
2026-01-31 15:53:33 +08:00 · 2026-01-27 13:00:14 +07:00
parent 975fc35d38
commit 5badd7e26e
153 changed files with 685 additions and 493 deletions
--- a/http/cves/2014/CVE-2014-4577.yaml
+++ b/http/cves/2014/CVE-2014-4577.yaml
@@ -33,9 +33,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2014/CVE-2014-4941.yaml
+++ b/http/cves/2014/CVE-2014-4941.yaml
@@ -33,9 +33,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2014/CVE-2014-5181.yaml
+++ b/http/cves/2014/CVE-2014-5181.yaml
@@ -27,9 +27,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2014/CVE-2014-5187.yaml
+++ b/http/cves/2014/CVE-2014-5187.yaml
@@ -33,9 +33,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2015/CVE-2015-8562.yaml
+++ b/http/cves/2015/CVE-2015-8562.yaml
@@ -33,9 +33,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2016/CVE-2016-10993.yaml
+++ b/http/cves/2016/CVE-2016-10993.yaml
@@ -33,9 +33,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2017/CVE-2017-18590.yaml
+++ b/http/cves/2017/CVE-2017-18590.yaml
@@ -33,9 +33,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2017/CVE-2017-18598.yaml
+++ b/http/cves/2017/CVE-2017-18598.yaml
@@ -32,9 +32,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2018/CVE-2018-10383.yaml
+++ b/http/cves/2018/CVE-2018-10383.yaml
@@ -33,9 +33,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2019/CVE-2019-14470.yaml
+++ b/http/cves/2019/CVE-2019-14470.yaml
@@ -31,9 +31,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2019/CVE-2019-16332.yaml
+++ b/http/cves/2019/CVE-2019-16332.yaml
@@ -32,9 +32,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2019/CVE-2019-17231.yaml
+++ b/http/cves/2019/CVE-2019-17231.yaml
@@ -53,9 +53,10 @@ http:
        condition: and
        internal: true

-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2019/CVE-2019-20504.yaml
+++ b/http/cves/2019/CVE-2019-20504.yaml
@@ -33,9 +33,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2019/CVE-2019-7139.yaml
+++ b/http/cves/2019/CVE-2019-7139.yaml
@@ -39,9 +39,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    host-redirects: true
    max-redirects: 2
    matchers:
--- a/http/cves/2019/CVE-2019-8943.yaml
+++ b/http/cves/2019/CVE-2019-8943.yaml
@@ -85,9 +85,11 @@ http:
        condition: and
        internal: true

-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    extractors:
      - type: regex
        name: theme_name
--- a/http/cves/2020/CVE-2020-10987.yaml
+++ b/http/cves/2020/CVE-2020-10987.yaml
@@ -33,9 +33,11 @@ variables:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    redirects: true

    matchers:
--- a/http/cves/2020/CVE-2020-28653.yaml
+++ b/http/cves/2020/CVE-2020-28653.yaml
@@ -40,9 +40,11 @@ variables:
 flow: http(1) && http(2) && http(3) && http(4)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    host-redirects: true
    max-redirects: 3

--- a/http/cves/2020/CVE-2020-29395.yaml
+++ b/http/cves/2020/CVE-2020-29395.yaml
@@ -43,9 +43,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2020/CVE-2020-5766.yaml
+++ b/http/cves/2020/CVE-2020-5766.yaml
@@ -31,9 +31,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2021/CVE-2021-24274.yaml
+++ b/http/cves/2021/CVE-2021-24274.yaml
@@ -33,9 +33,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2021/CVE-2021-24364.yaml
+++ b/http/cves/2021/CVE-2021-24364.yaml
@@ -32,9 +32,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2021/CVE-2021-24407.yaml
+++ b/http/cves/2021/CVE-2021-24407.yaml
@@ -31,9 +31,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2021/CVE-2021-24522.yaml
+++ b/http/cves/2021/CVE-2021-24522.yaml
@@ -29,9 +29,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2021/CVE-2021-24527.yaml
+++ b/http/cves/2021/CVE-2021-24527.yaml
@@ -28,8 +28,6 @@ info:
    publicwww-query: "/wp-content/plugins/profile-builder/"
  tags: cve,cve2021,wp,wp-plugin,wordpress,profile-builder,vkev,vuln

-flow: http(1) && http(2)
-
 variables:
  pass: "{{to_lower(rand_text_alpha(12))}}"
  path: "{{path}}"
@@ -102,4 +100,4 @@ http:
      - type: dsl
        dsl:
          - pass
-# digest: 4a0a00473045022100e51c00fee2431489a3771a41a81668e2945ce71308076ce7aa6abde3b50a222f0220685a334a107ad475b7fdcaa3c645f5f9e7e189f509df8b1da7dfa2bdeda4379f:922c64590222798bb761d5b6d8e72950
+# digest: 490a00463044022008eb16c6a08d7290fb8b652cbc1687e609316cc368dc20438c6c7524c396d61102201b48638e94329d3a6cfff37a01f40bbd9cf702635efead5a9dffb28bba9ada4c:922c64590222798bb761d5b6d8e72950
--- a/http/cves/2021/CVE-2021-27748.yaml
+++ b/http/cves/2021/CVE-2021-27748.yaml
@@ -28,9 +28,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    host-redirects: true
    max-redirects: 2
    matchers:
--- a/http/cves/2021/CVE-2021-30175.yaml
+++ b/http/cves/2021/CVE-2021-30175.yaml
@@ -33,9 +33,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2021/CVE-2021-31316.yaml
+++ b/http/cves/2021/CVE-2021-31316.yaml
@@ -31,9 +31,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2021/CVE-2021-31324.yaml
+++ b/http/cves/2021/CVE-2021-31324.yaml
@@ -31,9 +31,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2021/CVE-2021-36888.yaml
+++ b/http/cves/2021/CVE-2021-36888.yaml
@@ -49,9 +49,10 @@ http:
        condition: and
        internal: true

-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2021/CVE-2021-41467.yaml
+++ b/http/cves/2021/CVE-2021-41467.yaml
@@ -30,9 +30,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    host-redirects: true
    max-redirects: 2

--- a/http/cves/2021/CVE-2021-4380.yaml
+++ b/http/cves/2021/CVE-2021-4380.yaml
@@ -33,9 +33,10 @@ info:
 flow: http(1) && http(2) && http(3)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
@@ -69,9 +70,10 @@ http:
        condition: and
        internal: true

-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2022/CVE-2022-0479.yaml
+++ b/http/cves/2022/CVE-2022-0479.yaml
@@ -30,9 +30,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    host-redirects: true
    matchers:
      - type: dsl
--- a/http/cves/2022/CVE-2022-25322.yaml
+++ b/http/cves/2022/CVE-2022-25322.yaml
@@ -31,9 +31,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2022/CVE-2022-28033.yaml
+++ b/http/cves/2022/CVE-2022-28033.yaml
@@ -31,9 +31,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2022/CVE-2022-31101.yaml
+++ b/http/cves/2022/CVE-2022-31101.yaml
@@ -71,9 +71,11 @@ http:
          - compare_versions(version, '>= 2.0.0', '<= 2.1.0')
        internal: true

-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    host-redirects: true
    max-redirects: 3

--- a/http/cves/2022/CVE-2022-31181.yaml
+++ b/http/cves/2022/CVE-2022-31181.yaml
@@ -123,9 +123,10 @@ http:
        internal: true
        condition: and

-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
@@ -153,9 +154,10 @@ http:
        condition: and
        internal: true

-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
@@ -200,9 +202,10 @@ http:
        condition: and
        internal: true

-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers-condition: and
    matchers:
--- a/http/cves/2022/CVE-2022-34487.yaml
+++ b/http/cves/2022/CVE-2022-34487.yaml
@@ -49,9 +49,10 @@ http:
          - contains(body, 'oxi-confirmation-success')
        condition: and

-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2022/CVE-2022-3805.yaml
+++ b/http/cves/2022/CVE-2022-3805.yaml
@@ -62,11 +62,11 @@ http:
          - "(?mi)Stable tag: ([0-9.]+)"
        internal: true

-  - method: GET
-    path:
-      - "{{BaseURL}}/"
-    headers:
-      Content-Type: application/x-www-form-urlencoded
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+        Content-Type: application/x-www-form-urlencoded

    matchers:
      - type: dsl
--- a/http/cves/2022/CVE-2022-4375.yaml
+++ b/http/cves/2022/CVE-2022-4375.yaml
@@ -33,9 +33,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2022/CVE-2022-45699.yaml
+++ b/http/cves/2022/CVE-2022-45699.yaml
@@ -28,9 +28,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2023/CVE-2023-2518.yaml
+++ b/http/cves/2023/CVE-2023-2518.yaml
@@ -31,9 +31,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    redirects: true
    matchers:
      - type: word
--- a/http/cves/2023/CVE-2023-25280.yaml
+++ b/http/cves/2023/CVE-2023-25280.yaml
@@ -32,9 +32,10 @@ variables:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2023/CVE-2023-27034.yaml
+++ b/http/cves/2023/CVE-2023-27034.yaml
@@ -34,9 +34,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    host-redirects: true
    max-redirects: 3
    matchers:
--- a/http/cves/2023/CVE-2023-2745.yaml
+++ b/http/cves/2023/CVE-2023-2745.yaml
@@ -27,9 +27,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2023/CVE-2023-27638.yaml
+++ b/http/cves/2023/CVE-2023-27638.yaml
@@ -30,9 +30,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    host-redirects: true
    matchers:
      - type: dsl
--- a/http/cves/2023/CVE-2023-27847.yaml
+++ b/http/cves/2023/CVE-2023-27847.yaml
@@ -34,9 +34,11 @@ variables:
  num: "999999999"

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    host-redirects: true

    matchers:
--- a/http/cves/2023/CVE-2023-30192.yaml
+++ b/http/cves/2023/CVE-2023-30192.yaml
@@ -31,9 +31,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    host-redirects: true

    matchers:
--- a/http/cves/2023/CVE-2023-30194.yaml
+++ b/http/cves/2023/CVE-2023-30194.yaml
@@ -33,9 +33,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    host-redirects: true
    max-redirects: 2
    matchers:
--- a/http/cves/2023/CVE-2023-3169.yaml
+++ b/http/cves/2023/CVE-2023-3169.yaml
@@ -51,9 +51,11 @@ http:
          - 'contains(content_type, "application/json")'
        internal: true

-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    redirects: true
    max-redirects: 2

--- a/http/cves/2023/CVE-2023-3388.yaml
+++ b/http/cves/2023/CVE-2023-3388.yaml
@@ -50,9 +50,10 @@ http:
        condition: and
        internal: true

-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers-condition: and
    matchers:
--- a/http/cves/2023/CVE-2023-3578.yaml
+++ b/http/cves/2023/CVE-2023-3578.yaml
@@ -31,9 +31,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    host-redirects: true
    max-redirects: 2
    matchers:
--- a/http/cves/2023/CVE-2023-36284.yaml
+++ b/http/cves/2023/CVE-2023-36284.yaml
@@ -33,9 +33,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2023/CVE-2023-39650.yaml
+++ b/http/cves/2023/CVE-2023-39650.yaml
@@ -30,9 +30,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2023/CVE-2023-3990.yaml
+++ b/http/cves/2023/CVE-2023-3990.yaml
@@ -32,9 +32,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2023/CVE-2023-4151.yaml
+++ b/http/cves/2023/CVE-2023-4151.yaml
@@ -34,9 +34,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2023/CVE-2023-4284.yaml
+++ b/http/cves/2023/CVE-2023-4284.yaml
@@ -32,9 +32,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    redirects: true
    matchers:
      - type: word
--- a/http/cves/2023/CVE-2023-43323.yaml
+++ b/http/cves/2023/CVE-2023-43323.yaml
@@ -35,9 +35,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2023/CVE-2023-43373.yaml
+++ b/http/cves/2023/CVE-2023-43373.yaml
@@ -32,9 +32,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2023/CVE-2023-45375.yaml
+++ b/http/cves/2023/CVE-2023-45375.yaml
@@ -31,9 +31,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2023/CVE-2023-46455.yaml
+++ b/http/cves/2023/CVE-2023-46455.yaml
@@ -35,9 +35,10 @@ variables:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2023/CVE-2023-50094.yaml
+++ b/http/cves/2023/CVE-2023-50094.yaml
@@ -32,9 +32,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    host-redirects: true
    matchers:
      - type: dsl
--- a/http/cves/2023/CVE-2023-5558.yaml
+++ b/http/cves/2023/CVE-2023-5558.yaml
@@ -31,9 +31,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2023/CVE-2023-5561.yaml
+++ b/http/cves/2023/CVE-2023-5561.yaml
@@ -37,9 +37,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    redirects: true
    matchers:
      - type: dsl
--- a/http/cves/2023/CVE-2023-5974.yaml
+++ b/http/cves/2023/CVE-2023-5974.yaml
@@ -31,9 +31,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    redirects: true
    matchers:
      - type: word
--- a/http/cves/2023/CVE-2023-6000.yaml
+++ b/http/cves/2023/CVE-2023-6000.yaml
@@ -35,9 +35,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    extractors:
      - type: regex
        name: popup_id
--- a/http/cves/2023/CVE-2023-6444.yaml
+++ b/http/cves/2023/CVE-2023-6444.yaml
@@ -32,9 +32,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2023/CVE-2023-7116.yaml
+++ b/http/cves/2023/CVE-2023-7116.yaml
@@ -29,9 +29,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2024/CVE-2024-0195.yaml
+++ b/http/cves/2024/CVE-2024-0195.yaml
@@ -36,9 +36,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2024/CVE-2024-10516.yaml
+++ b/http/cves/2024/CVE-2024-10516.yaml
@@ -31,9 +31,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2024/CVE-2024-11680.yaml
+++ b/http/cves/2024/CVE-2024-11680.yaml
@@ -43,9 +43,10 @@ variables:
 flow: http(1) && http(2) && http(3) && http(4) && http(5)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
@@ -86,9 +87,10 @@ http:
        condition: and
        internal: true

-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
@@ -114,9 +116,10 @@ http:
        condition: and
        internal: true

-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2024/CVE-2024-11728.yaml
+++ b/http/cves/2024/CVE-2024-11728.yaml
@@ -35,9 +35,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2024/CVE-2024-12209.yaml
+++ b/http/cves/2024/CVE-2024-12209.yaml
@@ -34,9 +34,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2024/CVE-2024-12849.yaml
+++ b/http/cves/2024/CVE-2024-12849.yaml
@@ -35,9 +35,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2024/CVE-2024-13624.yaml
+++ b/http/cves/2024/CVE-2024-13624.yaml
@@ -30,9 +30,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    redirects: true
    matchers:
      - type: word
--- a/http/cves/2024/CVE-2024-13726.yaml
+++ b/http/cves/2024/CVE-2024-13726.yaml
@@ -28,9 +28,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2024/CVE-2024-13888.yaml
+++ b/http/cves/2024/CVE-2024-13888.yaml
@@ -33,9 +33,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2024/CVE-2024-21485.yaml
+++ b/http/cves/2024/CVE-2024-21485.yaml
@@ -27,9 +27,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2024/CVE-2024-22729.yaml
+++ b/http/cves/2024/CVE-2024-22729.yaml
@@ -32,9 +32,10 @@ variables:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2024/CVE-2024-24759.yaml
+++ b/http/cves/2024/CVE-2024-24759.yaml
@@ -31,9 +31,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2024/CVE-2024-3032.yaml
+++ b/http/cves/2024/CVE-2024-3032.yaml
@@ -31,9 +31,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    redirects: true
    matchers:
      - type: word
--- a/http/cves/2024/CVE-2024-30568.yaml
+++ b/http/cves/2024/CVE-2024-30568.yaml
@@ -33,9 +33,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2024/CVE-2024-31839.yaml
+++ b/http/cves/2024/CVE-2024-31839.yaml
@@ -47,9 +47,11 @@ http:
        {{password}}
        -----------------------------7531776718188184812862255877--

-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    extractors:
      - type: regex
        name: address
--- a/http/cves/2024/CVE-2024-3552.yaml
+++ b/http/cves/2024/CVE-2024-3552.yaml
@@ -27,9 +27,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2024/CVE-2024-36683.yaml
+++ b/http/cves/2024/CVE-2024-36683.yaml
@@ -31,9 +31,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    host-redirects: true
    max-redirects: 3
    matchers:
--- a/http/cves/2024/CVE-2024-3673.yaml
+++ b/http/cves/2024/CVE-2024-3673.yaml
@@ -31,9 +31,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2024/CVE-2024-36858.yaml
+++ b/http/cves/2024/CVE-2024-36858.yaml
@@ -33,9 +33,10 @@ variables:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2024/CVE-2024-3753.yaml
+++ b/http/cves/2024/CVE-2024-3753.yaml
@@ -31,9 +31,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: word
--- a/http/cves/2024/CVE-2024-41628.yaml
+++ b/http/cves/2024/CVE-2024-41628.yaml
@@ -33,9 +33,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2024/CVE-2024-41810.yaml
+++ b/http/cves/2024/CVE-2024-41810.yaml
@@ -29,9 +29,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    redirects: true
    matchers:
      - type: word
--- a/http/cves/2024/CVE-2024-43160.yaml
+++ b/http/cves/2024/CVE-2024-43160.yaml
@@ -38,9 +38,10 @@ flow: |
  http(1) && http(2) && http(3)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2024/CVE-2024-43919.yaml
+++ b/http/cves/2024/CVE-2024-43919.yaml
@@ -35,9 +35,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    host-redirects: true
    max-redirects: 2
    matchers:
--- a/http/cves/2024/CVE-2024-4399.yaml
+++ b/http/cves/2024/CVE-2024-4399.yaml
@@ -29,9 +29,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    redirects: true
    matchers:
      - type: word
--- a/http/cves/2024/CVE-2024-44000.yaml
+++ b/http/cves/2024/CVE-2024-44000.yaml
@@ -35,9 +35,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2024/CVE-2024-48360.yaml
+++ b/http/cves/2024/CVE-2024-48360.yaml
@@ -32,9 +32,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2024/CVE-2024-51482.yaml
+++ b/http/cves/2024/CVE-2024-51482.yaml
@@ -32,9 +32,11 @@ info:
 flow: http(1) && http(2) && http(3)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    host-redirects: true
    matchers:
      - type: word
--- a/http/cves/2024/CVE-2024-54330.yaml
+++ b/http/cves/2024/CVE-2024-54330.yaml
@@ -35,9 +35,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2024/CVE-2024-54385.yaml
+++ b/http/cves/2024/CVE-2024-54385.yaml
@@ -35,9 +35,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/http/cves/2024/CVE-2024-5765.yaml
+++ b/http/cves/2024/CVE-2024-5765.yaml
@@ -28,9 +28,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    redirects: true
    max-redirects: 2
    matchers:
--- a/http/cves/2024/CVE-2024-58136.yaml
+++ b/http/cves/2024/CVE-2024-58136.yaml
@@ -33,9 +33,11 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}
+
    redirects: true
    matchers:
      - type: word
--- a/http/cves/2024/CVE-2024-5947.yaml
+++ b/http/cves/2024/CVE-2024-5947.yaml
@@ -28,9 +28,10 @@ info:
 flow: http(1) && http(2)

 http:
-  - method: GET
-    path:
-      - "{{BaseURL}}/"
+  - raw:
+      - |
+        GET / HTTP/1.1
+        Host: {{Hostname}}

    matchers:
      - type: dsl
--- a/Show More
+++ b/Show More