nuclei-templates/http/technologies/fastjson-version.yaml

id: fastjson-version

info:
  name: Fastjson Version Detection
  author: yuansec
  severity: info
  description: If the server returns an exception to the client,The fastjson version will be retrieved,Fastjson versions greater than 1.2.41,Contains the latest version(1.2.76).
  reference:
    - https://blog.csdn.net/caiqiiqi/article/details/107907489
  tags: fastjson,tech
  metadata:
    max-request: 1

http:
  - raw:
      - |
        POST / HTTP/1.1
        Host: {{Hostname}}
        Content-Type: application/json

        {"@type":"java.lang.AutoCloseable"

    matchers:
      - type: word
        words:
          - 'fastjson-version'

    extractors:
      - type: regex
        part: body
        group: 1
        regex:
          - 'fastjson-version.*([0-9]\.[0-9]+\.[0-9]+)'
lint fix 2021-11-04 21:37:43 +00:00			`id: fastjson-version`
Create fastjson-version-detection.yaml 2021-11-04 12:36:06 +00:00
			`info:`
Create fastjson-version-detection.yaml 2021-11-04 12:46:29 +00:00			`name: Fastjson Version Detection`
			`author: yuansec`
			`severity: info`
			`description: If the server returns an exception to the client,The fastjson version will be retrieved,Fastjson versions greater than 1.2.41,Contains the latest version(1.2.76).`
refactor: Description field uniformization * info field reorder * reference values refactored to list * added new lines after the id and before the protocols * removed extra new lines * split really long descriptions to multiple lines (part 1) * other minor fixes 2022-04-22 10:38:41 +00:00			`reference:`
			`- https://blog.csdn.net/caiqiiqi/article/details/107907489`
lint fix 2021-11-04 21:37:43 +00:00			`tags: fastjson,tech`
Added max request counter of each template 2023-04-28 08:11:21 +00:00			`metadata:`
			`max-request: 1`
Create fastjson-version-detection.yaml 2021-11-04 12:36:06 +00:00
Refactoring the directory structure based on protocols (#7137) * moving http templates * updated cves.json * moved network CVEs * updated scripts * updated workflows * updated requests to http * replaced network to tcp --------- Co-authored-by: sandeep <8293321+ehsandeep@users.noreply.github.com> 2023-04-27 04:28:59 +00:00			`http:`
Create fastjson-version-detection.yaml 2021-11-04 12:36:06 +00:00			`- raw:`
			`- \|`
			`POST / HTTP/1.1`
			`Host: {{Hostname}}`
			`Content-Type: application/json`

Create fastjson-version-detection.yaml 2021-11-04 12:46:29 +00:00			`{"@type":"java.lang.AutoCloseable"`
Create fastjson-version-detection.yaml 2021-11-04 12:36:06 +00:00
lint fix 2021-11-05 09:54:58 +00:00			`matchers:`
			`- type: word`
			`words:`
			`- 'fastjson-version'`

			`extractors:`
update fastjson-version extractors 2021-11-05 06:40:25 +00:00			`- type: regex`
lint fix 2021-11-04 21:37:43 +00:00			`part: body`
lint fix 2021-11-05 09:54:58 +00:00			`group: 1`
			`regex:`
update fastjson-version extractors 2021-11-05 06:40:25 +00:00			`- 'fastjson-version.*([0-9]\.[0-9]+\.[0-9]+)'`