daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Create apache-rocketmq-broker-unauth.yaml

patch-1
J4vaovo 2023-06-14 00:10:15 +08:00 committed by GitHub
parent 26da485751
commit 445b079614
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 24 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

24
network/apache-rocketmq-broker-unauth.yaml Normal file
View File

@ -0,0 +1,24 @@
id: apache-rocketmq-broker-unauth
info:
name: Rocketmq - Unauthenticated Access
author: j4vaovo
severity: high
description: Rocketmq Unauthenticated Access.
reference:
tags: network,rocketmq,unauth
network:
- inputs:
- data: "000000c9000000b17b22636f6465223a32352c226578744669656c6473223a7b224163636573734b6579223a22726f636b65746d7132222c225369676e6174757265223a222b7a6452645575617a6953516b4855557164727477673146386a6b3d227d2c22666c6167223a302c226c616e6775616765223a224a415641222c226f7061717565223a302c2273657269616c697a655479706543757272656e74525043223a224a534f4e222c2276657273696f6e223a3433337d746573745f6b65793d746573745f76616c75650a0a"
type: hex
host:
- "{{Hostname}}"
- "{{Host}}:10911"
read-size: 2048
matchers:
- type: word
words:
- "serializeTypeCurrentRPC"