feat: add curated internal network pocs

This commit is contained in:
ZacharyZcR
2026-07-16 01:45:09 +08:00
parent 61ae87d171
commit 621b2c2f24
52 changed files with 1230 additions and 0 deletions
+26
View File
@@ -0,0 +1,26 @@
id: solr-admin-query
info:
name: Solr Admin Query Page
author: dhiyaneshDK
severity: high
verified: false
description: |
Solr Admin Query Page is accessible.
reference:
- https://www.exploit-db.com/ghdb/5856
tags: solr,admin,query,unauthorized
created: 2023/05/26
rules:
r0:
request:
method: GET
path: /admin/
expression: response.status == 200 && response.body.bcontains(b'<title>Solr admin page</title>')
r1:
request:
method: GET
path: /solr/admin/
expression: response.status == 200 && response.body.bcontains(b'<title>Solr admin page</title>')
expression: r0() && r1()