Update apache-solr-log4j-rce.yaml

patch-1
Dhiyaneshwaran 2023-01-11 12:04:21 +05:30 committed by GitHub
parent c19d6b1e1a
commit 8f99b72676
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 11 additions and 2 deletions

View File

@ -29,6 +29,11 @@ requests:
matchers-condition: and
matchers:
- type: word
part: body
words:
- "String index out of range"
- type: word
part: interactsh_protocol # Confirms the DNS Interaction
words:
@ -37,13 +42,17 @@ requests:
- type: regex
part: interactsh_request
regex:
- '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+' # Match for extracted ${hostName} variable
- '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+' # Match for extracted ${hostName} variable
extractors:
- type: kval
kval:
- interactsh_ip # Print remote interaction IP in output
- type: regex
part: interactsh_request
group: 1
regex:
- '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+' # Print extracted ${hostName} in output
- '([a-zA-Z0-9\.\-]+)\.([a-z0-9]+)\.([a-z0-9]+)\.\w+' # Print extracted ${hostName} in output
# Enhanced by mp on 2022/05/27