nuclei-templates/technologies/fastjson-version.yaml

id: fastjson-version

info:
  name: Fastjson Version Detection
  author: yuansec
  severity: info
  description: If the server returns an exception to the client,The fastjson version will be retrieved,Fastjson versions greater than 1.2.41,Contains the latest version(1.2.76).
  reference:
    - https://blog.csdn.net/caiqiiqi/article/details/107907489
  tags: fastjson,tech

requests:
  - raw:
      - |
        POST / HTTP/1.1
        Host: {{Hostname}}
        Content-Type: application/json

        {"@type":"java.lang.AutoCloseable"

    matchers:
      - type: word
        words:
          - 'fastjson-version'

    extractors:
      - type: regex
        part: body
        group: 1
        regex:
          - 'fastjson-version.*([0-9]\.[0-9]+\.[0-9]+)'
lint fix 2021-11-04 21:37:43 +00:00			`id: fastjson-version`
Create fastjson-version-detection.yaml 2021-11-04 12:36:06 +00:00
			`info:`
Create fastjson-version-detection.yaml 2021-11-04 12:46:29 +00:00			`name: Fastjson Version Detection`
			`author: yuansec`
			`severity: info`
			`description: If the server returns an exception to the client,The fastjson version will be retrieved,Fastjson versions greater than 1.2.41,Contains the latest version(1.2.76).`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00			`reference:`
			`- https://blog.csdn.net/caiqiiqi/article/details/107907489`
lint fix 2021-11-04 21:37:43 +00:00			`tags: fastjson,tech`
Create fastjson-version-detection.yaml 2021-11-04 12:36:06 +00:00
			`requests:`
			`- raw:`
			`- \|`
			`POST / HTTP/1.1`
			`Host: {{Hostname}}`
			`Content-Type: application/json`

Create fastjson-version-detection.yaml 2021-11-04 12:46:29 +00:00			`{"@type":"java.lang.AutoCloseable"`
Create fastjson-version-detection.yaml 2021-11-04 12:36:06 +00:00
lint fix 2021-11-05 09:54:58 +00:00			`matchers:`
			`- type: word`
			`words:`
			`- 'fastjson-version'`

			`extractors:`
update fastjson-version extractors 2021-11-05 06:40:25 +00:00			`- type: regex`
lint fix 2021-11-04 21:37:43 +00:00			`part: body`
lint fix 2021-11-05 09:54:58 +00:00			`group: 1`
			`regex:`
update fastjson-version extractors 2021-11-05 06:40:25 +00:00			`- 'fastjson-version.*([0-9]\.[0-9]+\.[0-9]+)'`