Update hasura-graphql-psql-exec.yaml

patch-1
Prince Chaddha 2021-08-02 22:15:52 +05:30 committed by GitHub
parent 0c68ef5f66
commit 204cf337c8
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 2 additions and 1 deletions

View File

@ -4,7 +4,7 @@ info:
author: Udyz
name: Hasura GraphQL Engine - postgresql query exec
severity: critical
reference: https://github.com/projectdiscovery/nuclei-templates/blob/53bed168cce5619e18b991c56779d4ce31ce153f/vulnerabilities/other/hasura-graphql-ssrf.yaml
reference: https://www.exploit-db.com/exploits/49802
tags: hasura,rce
requests:
@ -34,3 +34,4 @@ requests:
- type: regex
regex:
- "root:.*:0:0:"
part: body