interactsh-requests-mc-and.yaml

id: interactsh-requests-mc-and

info:
  name: interactsh multi request matcher condition
  author: pdteam
  severity: info

http:
  - raw:
      - |
        GET /api/geoping/{{interactsh-url}} HTTP/1.1
        Host: {{Hostname}}

      - |
        GET / HTTP/1.1
        Host: {{Hostname}}

    matchers-condition: and
    matchers:
      - type: word
        part: interactsh_protocol  # Confirms the DNS Interaction
        words:
          - "dns"

      - type: dsl
        dsl:
          - "status_code_2 == 200"