2021-02-20 17:35:47 +00:00
|
|
|
id: dedecms-openredirect
|
|
|
|
|
|
|
|
|
|
info:
|
|
|
|
|
name: DedeCMS Open Redirect
|
|
|
|
|
author: pikpikcu
|
|
|
|
|
severity: low
|
2021-02-20 17:42:14 +00:00
|
|
|
reference: https://blog.csdn.net/ystyaoshengting/article/details/82734888
|
2021-02-20 17:35:47 +00:00
|
|
|
tags: dedecms,redirect
|
|
|
|
|
|
|
|
|
|
requests:
|
|
|
|
|
- method: GET
|
|
|
|
|
path:
|
|
|
|
|
- "{{BaseURL}}/plus/download.php?open=1&link=aHR0cHM6Ly9ldmlsLmNvbQo="
|
|
|
|
|
|
|
|
|
|
matchers-condition: and
|
|
|
|
|
matchers:
|
|
|
|
|
- type: word
|
|
|
|
|
words:
|
|
|
|
|
- "Location: https://evil.com"
|
|
|
|
|
part: header
|
|
|
|
|
|
|
|
|
|
- type: status
|
|
|
|
|
status:
|
|
|
|
|
- 302
|
