Update CVE-2022-33174.yaml

cves/2022/CVE-2022-33174.yaml

@@ -9,7 +9,10 @@ info:
   reference:
     - https://gynvael.coldwind.pl/?lang=en&id=748
     - https://nvd.nist.gov/vuln/detail/CVE-2022-33174
-  tags: cve,cve2022,powertek,auth
+  metadata:
+    verified: true
+    shodan-query: http.html:"Powertek"
+  tags: cve,cve2022,powertek,auth-bypass
 
 requests:
   - raw:
@@ -29,3 +32,11 @@ requests:
       - type: status
         status:
           - 200
+
+    extractors:
+      - type: regex
+        part: body
+        group: 1
+        regex:
+          - '<sys\.passwd>([A-Z0-9a-z]+)<\/sys\.passwd>'
+          - '<sys\.su\.name>([a-z]+)<\/sys\.su\.name>'