mirror of
https://github.com/shadow1ng/fscan.git
synced 2025-11-05 10:45:27 +00:00
15 lines
386 B
YAML
15 lines
386 B
YAML
|
name: poc-yaml-kong-cve-2020-11710-unauth
|
||
|
|
rules:
|
||
|
|
- method: GET
|
||
|
|
path: /
|
||
|
|
expression: |
|
||
|
|
response.status == 200 && response.body.bcontains(b"kong_env")
|
||
|
|
- method: GET
|
||
|
|
path: /status
|
||
|
|
expression: |
|
||
|
|
response.status == 200 && response.body.bcontains(b"kong_db_cache_miss")
|
||
|
|
detail:
|
||
|
|
author: Loneyer
|
||
|
|
links:
|
||
|
|
- https://mp.weixin.qq.com/s/Ttpe63H9lQe87Uk0VOyMFw
|