feat: add curated internal network pocs

2026-09-26 05:01:53 +08:00 · 2026-07-16 01:45:09 +08:00
parent 61ae87d171
commit 621b2c2f24
52 changed files with 1230 additions and 0 deletions
@@ -0,0 +1,21 @@
+id: docker-registry-api-unauth
+
+info:
+  name: docker registry api 未经批准
+  author: p0wd3r
+  severity: critical
+  tags: docker,unauth
+  created: 2024/01/12
+
+rules:
+    r0:
+        request:
+            method: GET
+            path: /v2/
+        expression: response.status == 200 && "docker-distribution-api-version" in response.headers && response.headers["docker-distribution-api-version"].contains("registry/2.0")
+    r1:
+        request:
+            method: GET
+            path: /v2/_catalog
+        expression: response.status == 200 && response.content_type.contains("application/json") && response.body.bcontains(b"repositories")
+expression: r0() && r1()+