优化xray解析模块,支持groups、新增poc

This commit is contained in:
影舞者
2021-11-16 14:42:35 +08:00
parent 858c28724b
commit b06d7ac94c
313 changed files with 4314 additions and 760 deletions
+12
View File
@@ -0,0 +1,12 @@
name: poc-yaml-razor-cve-2018-8770
rules:
- method: GET
path: /tests/generate.php
follow_redirects: false
expression: |
response.status == 200 && response.body.bcontains(b"Fatal error: Class 'PHPUnit_Framework_TestCase' not found in ") && response.body.bcontains(b"/application/third_party/CIUnit/libraries/CIUnitTestCase.php on line")
detail:
author: we1x4n(https://we1x4n.github.io/)
links:
- http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-8770
- https://www.exploit-db.com/exploits/44495/