diff --git a/http/vulnerabilities/other/fumengyun-sqli.yaml b/http/vulnerabilities/other/fumengyun-sqli.yaml index 37665dde85..b93a266d20 100644 --- a/http/vulnerabilities/other/fumengyun-sqli.yaml +++ b/http/vulnerabilities/other/fumengyun-sqli.yaml @@ -24,7 +24,20 @@ info: fofa-query: title="孚盟云 " tags: fumasoft,sqli +flow: http(1) && http(2) + http: + - raw: + - | + GET / HTTP/1.1 + Host: {{Hostname}} + + matchers: + - type: dsl + dsl: + - 'contains(response, "孚盟")' + internal: true + - raw: - | @timeout: 30s @@ -54,4 +67,4 @@ http: - 'regex("^0$", body_2)' - 'contains(content_type_2, "text/plain")' condition: and -# digest: 4b0a00483046022100ae1de48c3420836a939b97509d95a1ad53e9481ea5e8680a0d411d0ccbd77c5c022100c5061fdb58d047ed2a6a44fa30f2b40ff991cfd291bc19817888b8d2bbd39224:922c64590222798bb761d5b6d8e72950 \ No newline at end of file +# digest: 4b0a00483046022100ae1de48c3420836a939b97509d95a1ad53e9481ea5e8680a0d411d0ccbd77c5c022100c5061fdb58d047ed2a6a44fa30f2b40ff991cfd291bc19817888b8d2bbd39224:922c64590222798bb761d5b6d8e72950