2020-07-02 13:53:41 +00:00
|
|
|
id: telerik-dialoghandler-detect
|
2021-05-25 00:01:08 +00:00
|
|
|
|
2020-07-02 13:53:41 +00:00
|
|
|
info:
|
|
|
|
name: Detect Telerik Web UI Dialog Handler
|
2022-02-01 19:04:39 +00:00
|
|
|
author: organiccrap,zhenwarx,nielsing
|
2020-09-20 12:57:43 +00:00
|
|
|
severity: info
|
2022-02-28 14:22:58 +00:00
|
|
|
description: This template detects the Telerik Web UI Dialog Handler.
|
2021-08-18 11:37:49 +00:00
|
|
|
reference:
|
2021-06-02 08:08:17 +00:00
|
|
|
- https://captmeelo.com/pentest/2018/08/03/pwning-with-telerik.html
|
|
|
|
- https://github.com/bao7uo/dp_crypto
|
2023-04-28 08:11:21 +00:00
|
|
|
metadata:
|
|
|
|
max-request: 17
|
2023-10-14 11:27:55 +00:00
|
|
|
tags: tech,telerik,asp
|
2021-05-25 00:01:08 +00:00
|
|
|
|
2023-04-27 04:28:59 +00:00
|
|
|
http:
|
2020-07-02 13:53:41 +00:00
|
|
|
- method: GET
|
|
|
|
path:
|
2024-04-12 10:31:51 +00:00
|
|
|
- "{{BaseURL}}{{paths}}"
|
|
|
|
payloads:
|
|
|
|
paths:
|
|
|
|
- '/Telerik.Web.UI.DialogHandler.aspx?dp=1'
|
|
|
|
- '/desktopmodules/telerikwebui/radeditorprovider/telerik.web.ui.dialoghandler.aspx?dp=1'
|
|
|
|
- '/desktopmodules/dnnwerk.radeditorprovider/dialoghandler.aspx?dp=1'
|
|
|
|
- '/DesktopModules/Admin/RadEditorProvider/DialogHandler.aspx?dp=1'
|
|
|
|
- '/DesktopModule/UIQuestionControls/UIAskQuestion/Telerik.Web.UI.DialogHandler.aspx?dp=1'
|
|
|
|
- '/Modules/CMS/Telerik.Web.UI.DialogHandler.aspx?dp=1'
|
|
|
|
- '/Admin/ServerSide/Telerik.Web.UI.DialogHandler.aspx?dp=1'
|
|
|
|
- '/DesktopModules/TNComments/Telerik.Web.UI.DialogHandler.aspx?dp=1'
|
|
|
|
- '/Providers/HtmlEditorProviders/Telerik/Telerik.Web.UI.DialogHandler.aspx?dp=1'
|
|
|
|
- '/App_Master/Telerik.Web.UI.DialogHandler.aspx?dp=1'
|
|
|
|
- '/common/admin/PhotoGallery2/Telerik.Web.UI.DialogHandler.aspx?dp=1'
|
|
|
|
- '/common/admin/Jobs2/Telerik.Web.UI.DialogHandler.aspx?dp=1'
|
|
|
|
- '/AsiCommon/Controls/ContentManagement/ContentDesigner/Telerik.Web.UI.DialogHandler.aspx?dp=1'
|
|
|
|
- '/common/admin/Calendar/Telerik.Web.UI.DialogHandler.aspx?dp=1'
|
|
|
|
- '/cms/portlets/Telerik.Web.UI.DialogHandler.aspx?dp=1'
|
|
|
|
- '/dashboard/UserControl/CMS/Page/Telerik.Web.UI.DialogHandler.aspx/Desktopmodules/Admin/dnnWerk.Users/DialogHandler.aspx?dp=1'
|
|
|
|
- '/Telerik.Web.UI.DialogHandler.axd?dp=1'
|
2021-05-25 00:01:08 +00:00
|
|
|
|
2021-09-02 11:59:10 +00:00
|
|
|
stop-at-first-match: true
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2020-07-10 10:07:53 +00:00
|
|
|
matchers-condition: and
|
2020-07-02 13:53:41 +00:00
|
|
|
matchers:
|
|
|
|
- type: status
|
|
|
|
status:
|
|
|
|
- 200
|
2023-10-14 11:27:55 +00:00
|
|
|
|
2020-07-02 13:53:41 +00:00
|
|
|
- type: word
|
|
|
|
words:
|
2021-06-02 08:08:17 +00:00
|
|
|
- 'Invalid length for a Base-64 char array'
|
2024-04-12 10:58:47 +00:00
|
|
|
# digest: 4a0a0047304502200cff3027072921648e60c5cd1c5d52acf643da4e72e64f21ca42966ca73c396c022100d916378e5e45b096f9acf749e16cfd37245734c6774b0a63b9d86f630ea05d7d:922c64590222798bb761d5b6d8e72950
|