From a887ebe28952a6e865b53ac8d532468b32b08687 Mon Sep 17 00:00:00 2001 From: PD-Team <8293321+bauthard@users.noreply.github.com> Date: Tue, 26 Jan 2021 20:01:01 +0530 Subject: [PATCH] few updates --- ...hellshock.yml => sonicwall-sslvpn-shellshock.yaml} | 11 +++++++---- 1 file changed, 7 insertions(+), 4 deletions(-) rename vulnerabilities/other/{sonicwall-sslvpn-shellshock.yml => sonicwall-sslvpn-shellshock.yaml} (69%) diff --git a/vulnerabilities/other/sonicwall-sslvpn-shellshock.yml b/vulnerabilities/other/sonicwall-sslvpn-shellshock.yaml similarity index 69% rename from vulnerabilities/other/sonicwall-sslvpn-shellshock.yml rename to vulnerabilities/other/sonicwall-sslvpn-shellshock.yaml index cd4fbf344d..2c0ad13d4b 100644 --- a/vulnerabilities/other/sonicwall-sslvpn-shellshock.yml +++ b/vulnerabilities/other/sonicwall-sslvpn-shellshock.yaml @@ -4,7 +4,9 @@ info: name: Sonicwall SSLVPN ShellShock RCE author: PR3R00T severity: critical - reference: https://twitter.com/chybeta/status/1353974652540882944/photo/1 + reference: | + - https://twitter.com/chybeta/status/1353974652540882944 + - https://darrenmartyn.ie/2021/01/24/visualdoor-sonicwall-ssl-vpn-exploit/ requests: - raw: @@ -15,12 +17,13 @@ requests: Accept: */* Accept-Language: en Connection: close - matchers-condition: and - matchers: + + matchers-condition: and + matchers: - type: regex regex: - "root:[x*]:0:0" part: body - type: status status: - - 200 + - 200 \ No newline at end of file