Version 4.0

wagiro · Sep 2, 2021 · 972d3e6 · 972d3e6
1 parent 600b4d8
commit 972d3e6
Show file tree

Hide file tree

Showing 166 changed files with 24,547 additions and 4,317 deletions.
diff --git a/BappManifest.bmf b/BappManifest.bmf
@@ -2,7 +2,7 @@ Uuid: 618f0b2489564607825e93eeed8b9e0a
 ExtensionType: 1
 Name: Burp Bounty, Scan Check Builder
 RepoName: scan-check-builder
-ScreenVersion: 3.2
+ScreenVersion: 4.0
 SerialVersion: 21
 MinPlatformVersion: 0
 ProOnly: True

diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -1,4 +1,9 @@
 ##  Changelog
+**4.0.0 20210902**
+* Burp Bounty Pro 1.6 core
+* Quick issue alert
+* More options for create profiles
+
 **3.6.0 20201005**
 * Fixed bug with Match And Replace
 * Fixed bug with content-type detection

diff --git a/README.md b/README.md
@@ -7,7 +7,7 @@
 [![Follow on Twitter](https://img.shields.io/twitter/follow/burpbounty.svg?style=social&label=Follow)](https://twitter.com/intent/follow?screen_name=burpbounty)
 
 
-# Burp Bounty - Scan Check Builder (BApp Store)
+# Burp Bounty Free - Scan Check Builder (BApp Store)
 
 This Burp Suite extension allows you, in a quick and simple way, to improve the active and passive burpsuite scanner by means of personalized rules through a very intuitive graphical interface. Through an advanced search of patterns and an improvement of the payload to send, we can create our own issue profiles both in the active scanner and in the passive.<br/>
 

diff --git a/profiles/API_Keys.bb b/profiles/API_Keys.bb
@@ -1 +1,92 @@
-[{"Name":"API_Keys","Enabled":true,"Scanner":2,"Author":"@six2dez1","UrlEncode":false,"Grep":["true,Or,(?:\\s|\u003d|:|\"|^)AKC[a-zA-Z0-9]{10,}","true,Or,^(AAAA[A-Za-z0-9_-]{7}:[A-Za-z0-9_-]{140})","true,Or,[^a-zA-Z0-9](AAAA[A-Za-z0-9_-]{7}:[A-Za-z0-9_-]{140})","true,Or,(?i)github(.{0,20})?(?-i)[\u0027\\\"][0-9a-zA-Z]{35,40}","true,Or,^(EAACEdEose0cBA[0-9A-Za-z]+)","true,Or,[^a-zA-Z0-9](EAACEdEose0cBA[0-9A-Za-z]+)","true,Or,(?i)(facebook|fb)(.{0,20})?(?-i)[\u0027\\\"][0-9a-f]{32}","true,Or,[^a-zA-Z0-9](AIza[0-9A-Za-z-_]{35})","true,Or,^(AIza[0-9A-Za-z-_]{35})","true,Or,(?i)(google|gcp|youtube|drive|yt)(.{0,20})?[\u0027\\\"][AIza[0-9a-z\\\\-_]{35}][\u0027\\\"]","true,Or,^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})","true,Or,[^a-zA-Z0-9]([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})","true,Or,(?i)heroku.{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}","true,Or,(?i)heroku(.{0,20})?[\u0027\"][0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}[\u0027\"]","true,Or,^([0-9a-f]{32}-us[0-9])","true,Or,[^a-zA-Z0-9]([0-9a-f]{32}-us[0-9])","true,Or,^(key-[0-9a-zA-Z]{32})","true,Or,[^a-zA-Z0-9](key-[0-9a-zA-Z]{32})","true,Or,SG\\.[0-9A-Za-z\\-_]{22}\\.[0-9A-Za-z\\-_]{43}","true,Or,(?i)sauce.{0,50}(\\\\\\\"|\u0027|`)?[0-9a-f-]{36}(\\\\\\\"|\u0027|`)?","true,Or,xox.-[0-9]{12}-[0-9]{12}-[0-9a-zA-Z]{24}","true,Or,(xox[p|b|o|a]-[0-9]{12}-[0-9]{12}-[0-9]{12}-[a-z0-9]{32})","true,Or,(xox[baprs]-([0-9a-zA-Z]{10,48})?)","true,Or,https:\\/\\/hooks.slack.com\\/services\\/T[a-zA-Z0-9_]{8}\\/B[a-zA-Z0-9_]{8}\\/[a-zA-Z0-9_]{24}","true,Or,sq0[a-z]{3}-[0-9A-Za-z\\-_]{22,43}","true,Or,(?:r|s)k_live_[0-9a-zA-Z]{24}","true,Or,^(SK[0-9a-fA-F]{32})","true,Or,[^a-zA-Z0-9](SK[0-9a-fA-F]{32})","true,Or,^(R_[0-9a-f]{32})","true,Or,[^a-zA-Z0-9](R_[0-9a-f]{32})","true,Or,(?i)nr-internal-api-key","true,Or,(?i)NRAK-[A-Z0-9]{27}","true,Or,(?i)NRRA-[a-f0-9]{42}","true,Or,(?i)NRAA-[a-f0-9]{27}"],"Tags":["All"],"PayloadResponse":false,"NotResponse":false,"isTime":false,"iscontentLength":false,"CaseSensitive":false,"ExcludeHTTP":false,"OnlyHTTP":false,"IsContentType":true,"ContentType":"text/css,image/jpeg,image/png,image/svg+xml,image/gif,image/tiff,image/webp,image/x-icon,application/font-woff,image/vnd.microsoft.icon,font/ttf,font/woff2","NegativeCT":true,"IsResponseCode":false,"ResponseCode":"","NegativeRC":false,"isurlextension":false,"NegativeUrlExtension":false,"MatchType":2,"RedirType":0,"MaxRedir":0,"payloadPosition":0,"grepsFile":"","IssueName":"API Key or Token discovered","IssueSeverity":"Medium","IssueConfidence":"Firm","IssueDetail":"API Key or Token discovered, check how to take advantage of it here https://github.com/streaak/keyhacks","RemediationDetail":"","IssueBackground":"","RemediationBackground":"","VariationAttributes":[],"InsertionPointType":[],"Scantype":0,"pathDiscovery":false}]
+[
+  {
+    "ProfileName": "API_Keys",
+    "Name": "",
+    "Enabled": true,
+    "Scanner": 2,
+    "Author": "@six2dez1",
+    "Payloads": [],
+    "Encoder": [],
+    "UrlEncode": false,
+    "CharsToUrlEncode": "",
+    "Grep": [
+      "true,,(?:\\s|\u003d|:|\"|^)AKC[a-zA-Z0-9]{10,}",
+      "true,Or,^(AAAA[A-Za-z0-9_-]{7}:[A-Za-z0-9_-]{140})",
+      "true,Or,[^a-zA-Z0-9](AAAA[A-Za-z0-9_-]{7}:[A-Za-z0-9_-]{140})",
+      "true,Or,(?i)github(.{0,20})?(?-i)[\u0027\\\"][0-9a-zA-Z]{35,40}",
+      "true,Or,^(EAACEdEose0cBA[0-9A-Za-z]+)",
+      "true,Or,[^a-zA-Z0-9](EAACEdEose0cBA[0-9A-Za-z]+)",
+      "true,Or,(?i)(facebook|fb)(.{0,20})?(?-i)[\u0027\\\"][0-9a-f]{32}",
+      "true,Or,[^a-zA-Z0-9](AIza[0-9A-Za-z-_]{35})",
+      "true,Or,^(AIza[0-9A-Za-z-_]{35})",
+      "true,Or,(?i)(google|gcp|youtube|drive|yt)(.{0,20})?[\u0027\\\"][AIza[0-9a-z\\\\-_]{35}][\u0027\\\"]",
+      "true,Or,^([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})",
+      "true,Or,[^a-zA-Z0-9]([0-9a-fA-F]{8}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{4}-[0-9a-fA-F]{12})",
+      "true,Or,(?i)heroku.{0,30}[0-9A-F]{8}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{4}-[0-9A-F]{12}",
+      "true,Or,(?i)heroku(.{0,20})?[\u0027\"][0-9a-f]{8}-[0-9a-f]{4}-[0-9a-f]{4}-[0-9a-f]{12}[\u0027\"]",
+      "true,Or,^([0-9a-f]{32}-us[0-9])",
+      "true,Or,[^a-zA-Z0-9]([0-9a-f]{32}-us[0-9])",
+      "true,Or,^(key-[0-9a-zA-Z]{32})",
+      "true,Or,[^a-zA-Z0-9](key-[0-9a-zA-Z]{32})",
+      "true,Or,SG\\.[0-9A-Za-z\\-_]{22}\\.[0-9A-Za-z\\-_]{43}",
+      "true,Or,(?i)sauce.{0,50}(\\\\\\\"|\u0027|`)?[0-9a-f-]{36}(\\\\\\\"|\u0027|`)?",
+      "true,Or,xox.-[0-9]{12}-[0-9]{12}-[0-9a-zA-Z]{24}",
+      "true,Or,(xox[p|b|o|a]-[0-9]{12}-[0-9]{12}-[0-9]{12}-[a-z0-9]{32})",
+      "true,Or,(xox[baprs]-([0-9a-zA-Z]{10,48})?)",
+      "true,Or,https:\\/\\/hooks.slack.com\\/services\\/T[a-zA-Z0-9_]{8}\\/B[a-zA-Z0-9_]{8}\\/[a-zA-Z0-9_]{24}",
+      "true,Or,sq0[a-z]{3}-[0-9A-Za-z\\-_]{22,43}",
+      "true,Or,(?:r|s)k_live_[0-9a-zA-Z]{24}",
+      "true,Or,^(SK[0-9a-fA-F]{32})",
+      "true,Or,[^a-zA-Z0-9](SK[0-9a-fA-F]{32})",
+      "true,Or,^(R_[0-9a-f]{32})",
+      "true,Or,[^a-zA-Z0-9](R_[0-9a-f]{32})",
+      "true,Or,(?i)nr-internal-api-key",
+      "true,Or,(?i)NRAK-[A-Z0-9]{27}",
+      "true,Or,(?i)NRRA-[a-f0-9]{42}",
+      "true,Or,(?i)NRAA-[a-f0-9]{27}"
+    ],
+    "Tags": [
+      "All"
+    ],
+    "PayloadResponse": false,
+    "NotResponse": false,
+    "TimeOut1": "",
+    "TimeOut2": "",
+    "isTime": false,
+    "contentLength": "",
+    "iscontentLength": false,
+    "CaseSensitive": false,
+    "ExcludeHTTP": false,
+    "OnlyHTTP": false,
+    "IsContentType": true,
+    "ContentType": "text/css,image/jpeg,image/png,image/svg+xml,image/gif,image/tiff,image/webp,image/x-icon,application/font-woff,image/vnd.microsoft.icon,font/ttf,font/woff2",
+    "HttpResponseCode": "",
+    "NegativeCT": true,
+    "IsResponseCode": false,
+    "ResponseCode": "",
+    "NegativeRC": false,
+    "urlextension": "",
+    "isurlextension": false,
+    "NegativeUrlExtension": false,
+    "MatchType": 2,
+    "Scope": 2,
+    "RedirType": 0,
+    "MaxRedir": 0,
+    "payloadPosition": 0,
+    "payloadsFile": "",
+    "grepsFile": "",
+    "IssueName": "API Key or Token discovered",
+    "IssueSeverity": "Medium",
+    "IssueConfidence": "Firm",
+    "IssueDetail": "API Key or Token discovered, check how to take advantage of it here https://github.com/streaak/keyhacks",
+    "RemediationDetail": "",
+    "IssueBackground": "",
+    "RemediationBackground": "",
+    "Header": [],
+    "VariationAttributes": [],
+    "InsertionPointType": [],
+    "Scanas": false,
+    "Scantype": 0,
+    "pathDiscovery": false
+  }
+]
diff --git a/profiles/AWS_Access_Key_ID.bb b/profiles/AWS_Access_Key_ID.bb
@@ -1 +1,64 @@
-[{"Name":"AWS_Access_Key_ID","Enabled":true,"Scanner":2,"Author":"@six2dez1","UrlEncode":false,"Grep":["true,Or,[^a-zA-Z0-9](AKIA[a-zA-Z0-9]{16})","true,Or,(AccessKeyId|aws_access_key_id)","true,Or,^(AKIA[a-zA-Z0-9]{16})","true,Or,^((A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16})","true,Or,[^a-zA-Z0-9]((A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16})"],"Tags":["All","Cloud"],"PayloadResponse":false,"NotResponse":false,"isTime":false,"iscontentLength":false,"CaseSensitive":false,"ExcludeHTTP":false,"OnlyHTTP":false,"IsContentType":true,"ContentType":"text/css,image/jpeg,image/png,image/svg+xml,image/gif,image/tiff,image/webp,image/x-icon,application/font-woff,image/vnd.microsoft.icon,font/ttf,font/woff2","NegativeCT":true,"IsResponseCode":false,"ResponseCode":"","NegativeRC":false,"isurlextension":false,"NegativeUrlExtension":false,"MatchType":2,"RedirType":0,"MaxRedir":0,"payloadPosition":0,"grepsFile":"","IssueName":"AWS Access  Key ID","IssueSeverity":"Information","IssueConfidence":"Certain","IssueDetail":"","RemediationDetail":"","IssueBackground":"","RemediationBackground":"","VariationAttributes":[],"InsertionPointType":[],"Scantype":0,"pathDiscovery":false}]
+[
+  {
+    "ProfileName": "AWS_Access_Key_ID",
+    "Name": "",
+    "Enabled": true,
+    "Scanner": 2,
+    "Author": "@six2dez1",
+    "Payloads": [],
+    "Encoder": [],
+    "UrlEncode": false,
+    "CharsToUrlEncode": "",
+    "Grep": [
+      "true,,[^a-zA-Z0-9](AKIA[a-zA-Z0-9]{16})",
+      "true,Or,(AccessKeyId|aws_access_key_id)",
+      "true,Or,^(AKIA[a-zA-Z0-9]{16})",
+      "true,Or,^((A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16})",
+      "true,Or,[^a-zA-Z0-9]((A3T[A-Z0-9]|AKIA|AGPA|AIDA|AROA|AIPA|ANPA|ANVA|ASIA)[A-Z0-9]{16})"
+    ],
+    "Tags": [
+      "All",
+      "Cloud"
+    ],
+    "PayloadResponse": false,
+    "NotResponse": false,
+    "TimeOut1": "",
+    "TimeOut2": "",
+    "isTime": false,
+    "contentLength": "",
+    "iscontentLength": false,
+    "CaseSensitive": false,
+    "ExcludeHTTP": false,
+    "OnlyHTTP": false,
+    "IsContentType": true,
+    "ContentType": "text/css,image/jpeg,image/png,image/svg+xml,image/gif,image/tiff,image/webp,image/x-icon,application/font-woff,image/vnd.microsoft.icon,font/ttf,font/woff2",
+    "HttpResponseCode": "",
+    "NegativeCT": true,
+    "IsResponseCode": false,
+    "ResponseCode": "",
+    "NegativeRC": false,
+    "urlextension": "",
+    "isurlextension": false,
+    "NegativeUrlExtension": false,
+    "MatchType": 2,
+    "Scope": 2,
+    "RedirType": 0,
+    "MaxRedir": 0,
+    "payloadPosition": 0,
+    "payloadsFile": "",
+    "grepsFile": "",
+    "IssueName": "AWS Access  Key ID",
+    "IssueSeverity": "Information",
+    "IssueConfidence": "Certain",
+    "IssueDetail": "",
+    "RemediationDetail": "",
+    "IssueBackground": "",
+    "RemediationBackground": "",
+    "Header": [],
+    "VariationAttributes": [],
+    "InsertionPointType": [],
+    "Scanas": false,
+    "Scantype": 0,
+    "pathDiscovery": false
+  }
+]
diff --git a/profiles/AWS_Client_Secret.bb b/profiles/AWS_Client_Secret.bb
@@ -1 +1,60 @@
-[{"Name":"AWS_Client_Secret","Enabled":true,"Scanner":2,"Author":"@six2dez1","UrlEncode":false,"Grep":["true,Or,(SecretAccessKey|aws_secret_access_key)"],"Tags":["All","Cloud"],"PayloadResponse":false,"NotResponse":false,"isTime":false,"iscontentLength":false,"CaseSensitive":false,"ExcludeHTTP":false,"OnlyHTTP":false,"IsContentType":true,"ContentType":"text/css,image/jpeg,image/png,image/svg+xml,image/gif,image/tiff,image/webp,image/x-icon,application/font-woff,image/vnd.microsoft.icon,font/ttf,font/woff2","NegativeCT":true,"IsResponseCode":false,"ResponseCode":"","NegativeRC":false,"isurlextension":false,"NegativeUrlExtension":false,"MatchType":2,"RedirType":0,"MaxRedir":0,"payloadPosition":0,"grepsFile":"","IssueName":"AWS Client Secret","IssueSeverity":"Information","IssueConfidence":"Certain","IssueDetail":"AWS Client Secret","RemediationDetail":"","IssueBackground":"","RemediationBackground":"","VariationAttributes":[],"InsertionPointType":[],"Scantype":0,"pathDiscovery":false}]
+[
+  {
+    "ProfileName": "AWS_Client_Secret",
+    "Name": "",
+    "Enabled": true,
+    "Scanner": 2,
+    "Author": "@six2dez1",
+    "Payloads": [],
+    "Encoder": [],
+    "UrlEncode": false,
+    "CharsToUrlEncode": "",
+    "Grep": [
+      "true,,(SecretAccessKey|aws_secret_access_key)"
+    ],
+    "Tags": [
+      "All",
+      "Cloud"
+    ],
+    "PayloadResponse": false,
+    "NotResponse": false,
+    "TimeOut1": "",
+    "TimeOut2": "",
+    "isTime": false,
+    "contentLength": "",
+    "iscontentLength": false,
+    "CaseSensitive": false,
+    "ExcludeHTTP": false,
+    "OnlyHTTP": false,
+    "IsContentType": true,
+    "ContentType": "text/css,image/jpeg,image/png,image/svg+xml,image/gif,image/tiff,image/webp,image/x-icon,application/font-woff,image/vnd.microsoft.icon,font/ttf,font/woff2",
+    "HttpResponseCode": "",
+    "NegativeCT": true,
+    "IsResponseCode": false,
+    "ResponseCode": "",
+    "NegativeRC": false,
+    "urlextension": "",
+    "isurlextension": false,
+    "NegativeUrlExtension": false,
+    "MatchType": 2,
+    "Scope": 2,
+    "RedirType": 0,
+    "MaxRedir": 0,
+    "payloadPosition": 0,
+    "payloadsFile": "",
+    "grepsFile": "",
+    "IssueName": "AWS Client Secret",
+    "IssueSeverity": "Information",
+    "IssueConfidence": "Certain",
+    "IssueDetail": "AWS Client Secret",
+    "RemediationDetail": "",
+    "IssueBackground": "",
+    "RemediationBackground": "",
+    "Header": [],
+    "VariationAttributes": [],
+    "InsertionPointType": [],
+    "Scanas": false,
+    "Scantype": 0,
+    "pathDiscovery": false
+  }
+]
diff --git a/profiles/AWS_Creds_File.bb b/profiles/AWS_Creds_File.bb
@@ -1 +1,59 @@
-[{"Name":"AWS_Creds_File","Enabled":true,"Scanner":2,"Author":"@six2dez1","UrlEncode":false,"Grep":["true,Or,(?i)(aws_access_key_id|aws_secret_access_key)(.{0,20})?\u003d.[0-9a-zA-Z\\/+]{20,40}"],"Tags":["All"],"PayloadResponse":false,"NotResponse":false,"isTime":false,"iscontentLength":false,"CaseSensitive":false,"ExcludeHTTP":false,"OnlyHTTP":false,"IsContentType":true,"ContentType":"text/css,image/jpeg,image/png,image/svg+xml,image/gif,image/tiff,image/webp,image/x-icon,application/font-woff,image/vnd.microsoft.icon,font/ttf,font/woff2","NegativeCT":true,"IsResponseCode":false,"ResponseCode":"","NegativeRC":false,"isurlextension":false,"NegativeUrlExtension":false,"MatchType":2,"RedirType":0,"MaxRedir":0,"payloadPosition":0,"grepsFile":"","IssueName":"AWS Credential Files","IssueSeverity":"Information","IssueConfidence":"Certain","IssueDetail":"","RemediationDetail":"","IssueBackground":"","RemediationBackground":"","VariationAttributes":[],"InsertionPointType":[],"Scantype":0,"pathDiscovery":false}]
+[
+  {
+    "ProfileName": "AWS_Creds_File",
+    "Name": "",
+    "Enabled": true,
+    "Scanner": 2,
+    "Author": "@six2dez1",
+    "Payloads": [],
+    "Encoder": [],
+    "UrlEncode": false,
+    "CharsToUrlEncode": "",
+    "Grep": [
+      "true,,(?i)(aws_access_key_id|aws_secret_access_key)(.{0,20})?\u003d.[0-9a-zA-Z\\/+]{20,40}"
+    ],
+    "Tags": [
+      "All"
+    ],
+    "PayloadResponse": false,
+    "NotResponse": false,
+    "TimeOut1": "",
+    "TimeOut2": "",
+    "isTime": false,
+    "contentLength": "",
+    "iscontentLength": false,
+    "CaseSensitive": false,
+    "ExcludeHTTP": false,
+    "OnlyHTTP": false,
+    "IsContentType": true,
+    "ContentType": "text/css,image/jpeg,image/png,image/svg+xml,image/gif,image/tiff,image/webp,image/x-icon,application/font-woff,image/vnd.microsoft.icon,font/ttf,font/woff2",
+    "HttpResponseCode": "",
+    "NegativeCT": true,
+    "IsResponseCode": false,
+    "ResponseCode": "",
+    "NegativeRC": false,
+    "urlextension": "",
+    "isurlextension": false,
+    "NegativeUrlExtension": false,
+    "MatchType": 2,
+    "Scope": 2,
+    "RedirType": 0,
+    "MaxRedir": 0,
+    "payloadPosition": 0,
+    "payloadsFile": "",
+    "grepsFile": "",
+    "IssueName": "AWS Credential Files",
+    "IssueSeverity": "Information",
+    "IssueConfidence": "Certain",
+    "IssueDetail": "",
+    "RemediationDetail": "",
+    "IssueBackground": "",
+    "RemediationBackground": "",
+    "Header": [],
+    "VariationAttributes": [],
+    "InsertionPointType": [],
+    "Scanas": false,
+    "Scantype": 0,
+    "pathDiscovery": false
+  }
+]
diff --git a/profiles/AWS_EC2_Url.bb b/profiles/AWS_EC2_Url.bb
@@ -1 +1,59 @@
-[{"Name":"AWS_EC2_Url","Enabled":true,"Scanner":2,"Author":"@six2dez1","UrlEncode":false,"Grep":["true,Or,ec2-[0-9-]+.cd-[a-z0-9-]+.compute.amazonaws.com"],"Tags":["All"],"PayloadResponse":false,"NotResponse":false,"isTime":false,"iscontentLength":false,"CaseSensitive":false,"ExcludeHTTP":false,"OnlyHTTP":false,"IsContentType":true,"ContentType":"text/css,image/jpeg,image/png,image/svg+xml,image/gif,image/tiff,image/webp,image/x-icon,application/font-woff,image/vnd.microsoft.icon,font/ttf,font/woff2","NegativeCT":true,"IsResponseCode":false,"ResponseCode":"","NegativeRC":false,"isurlextension":false,"NegativeUrlExtension":false,"MatchType":2,"RedirType":0,"MaxRedir":0,"payloadPosition":0,"grepsFile":"","IssueName":"AWS EC2 Url detected","IssueSeverity":"Information","IssueConfidence":"Certain","IssueDetail":"","RemediationDetail":"","IssueBackground":"","RemediationBackground":"","VariationAttributes":[],"InsertionPointType":[],"Scantype":0,"pathDiscovery":false}]
+[
+  {
+    "ProfileName": "AWS_EC2_Url",
+    "Name": "",
+    "Enabled": true,
+    "Scanner": 2,
+    "Author": "@six2dez1",
+    "Payloads": [],
+    "Encoder": [],
+    "UrlEncode": false,
+    "CharsToUrlEncode": "",
+    "Grep": [
+      "true,,ec2-[0-9-]+.cd-[a-z0-9-]+.compute.amazonaws.com"
+    ],
+    "Tags": [
+      "All"
+    ],
+    "PayloadResponse": false,
+    "NotResponse": false,
+    "TimeOut1": "",
+    "TimeOut2": "",
+    "isTime": false,
+    "contentLength": "",
+    "iscontentLength": false,
+    "CaseSensitive": false,
+    "ExcludeHTTP": false,
+    "OnlyHTTP": false,
+    "IsContentType": true,
+    "ContentType": "text/css,image/jpeg,image/png,image/svg+xml,image/gif,image/tiff,image/webp,image/x-icon,application/font-woff,image/vnd.microsoft.icon,font/ttf,font/woff2",
+    "HttpResponseCode": "",
+    "NegativeCT": true,
+    "IsResponseCode": false,
+    "ResponseCode": "",
+    "NegativeRC": false,
+    "urlextension": "",
+    "isurlextension": false,
+    "NegativeUrlExtension": false,
+    "MatchType": 2,
+    "Scope": 2,
+    "RedirType": 0,
+    "MaxRedir": 0,
+    "payloadPosition": 0,
+    "payloadsFile": "",
+    "grepsFile": "",
+    "IssueName": "AWS EC2 Url detected",
+    "IssueSeverity": "Information",
+    "IssueConfidence": "Certain",
+    "IssueDetail": "",
+    "RemediationDetail": "",
+    "IssueBackground": "",
+    "RemediationBackground": "",
+    "Header": [],
+    "VariationAttributes": [],
+    "InsertionPointType": [],
+    "Scanas": false,
+    "Scantype": 0,
+    "pathDiscovery": false
+  }
+]