Files
fscan/webscan/pocs/yonyou-yonbip-detect.yaml
T

18 lines
459 B
YAML

id: yonyou-iuap-detect
info:
name: 用友 iuap
author: zan8in
severity: info
tags: yonyou,yonbip
created: 2024/11/29
rules:
r0:
request:
method: GET
path: /iuap-apcom-workbench
follow_redirects: true
expression: response.status == 200 && response.body.bcontains(b"pageTitle = '欢迎登录';") && response.body.bcontains(b'<title>登录</title>') && response.body.bcontains(b'/iuap-uuas-user/getpwd"')
expression: r0()