解决nginx解析漏洞误报高的问题 (#913)

* 解决nginx解析漏洞误报高的问题

* 解决nginx解析漏洞误报问题

* 解决nginx解析漏洞误报问题

Author: 1in9e

Diff for: pocs/phpstudy-nginx-wrong-resolve-2.yml

@@ -19,7 +19,13 @@ rules:
     follow_redirects: false
     expression: |
       response.status == 200 && response.headers["Server"].contains("nginx")
+
+  - method: GET
+    path: /index.php/.xxx
+    follow_redirects: false
+    expression: |
+      response.status != 200
 detail:
-  author: LoRexxar(https://lorexxar.cn)
+  author: LoRexxar(https://lorexxar.cn),0h1in9e(https://www.ohlinge.cn)
   links:
     - https://www.seebug.org/vuldb/ssvid-98364

Diff for: pocs/phpstudy-nginx-wrong-resolve.yml

@@ -19,7 +19,13 @@ rules:
     follow_redirects: false
     expression: |
       response.status == 200 && response.headers["Server"].contains("nginx")
+
+  - method: GET
+    path: /index.html/.xxx
+    follow_redirects: false
+    expression: |
+      response.status != 200
 detail:
-  author: LoRexxar(https://lorexxar.cn)
+  author: LoRexxar(https://lorexxar.cn),0h1in9e(https://www.ohlinge.cn)
   links:
     - https://www.seebug.org/vuldb/ssvid-98364