Update opensns-rce.yaml
parent
35e1863cda
commit
683b511766
|
@ -4,7 +4,8 @@ info:
|
|||
name: OpenSNS - Remote Code Execution
|
||||
author: gy741
|
||||
severity: critical
|
||||
description: OpenSNS allows remote unauthenticated attackers to execute arbitrary code via the 'shareBox' endpoint.
|
||||
description: |
|
||||
OpenSNS allows remote unauthenticated attackers to execute arbitrary code via the 'shareBox' endpoint.
|
||||
reference:
|
||||
- http://www.0dayhack.net/index.php/2417/
|
||||
- https://www.pwnwiki.org/index.php?title=OpenSNS_%E9%81%A0%E7%A8%8B%E4%BB%A3%E7%A2%BC%E5%9F%B7%E8%A1%8C%E6%BC%8F%E6%B4%9E
|
||||
|
@ -24,10 +25,10 @@ requests:
|
|||
matchers-condition: and
|
||||
matchers:
|
||||
- type: regex
|
||||
part: body
|
||||
regex:
|
||||
- "((u|g)id=)"
|
||||
- "Microsoft Windows"
|
||||
part: body
|
||||
condition: or
|
||||
|
||||
- type: word
|
||||
|
|
Loading…
Reference in New Issue