Minesweeper will match for every Domain Name *server.com
Bug Report for Minesweeper
Issue: The current code as of Nov-26-2018 will match for every Domain Name *server.com
1. Install Minesweeper in Burp Pro Beta .12
2.Create a file named minesweeper-domain-test.txt and stash it in DefaultRoot
3. Include a few Domain Names in minesweeper-domain-test.txt, for example:
4. PoC: http://localhost/minesweeper-domain-test.txt
5. Check Results for Minesweeper
>> Scripts were included from the following cryptocurrency mining domain: server.com
This App will produce alot of Noise. Your Mileage May Vary.
Hoyt, extensions are produced by third parties. It might be worth contacting them with any issues:
Let us know if you have any trouble getting in touch.