minor changes
parent
b25ba806dc
commit
b273765752
|
@ -18,4 +18,7 @@ fuzzing/
|
||||||
helpers/
|
helpers/
|
||||||
miscellaneous/
|
miscellaneous/
|
||||||
headless/
|
headless/
|
||||||
iot/
|
iot/
|
||||||
|
|
||||||
|
# CVEs
|
||||||
|
cves/2017/CVE-2017-17562.yaml
|
|
@ -7,15 +7,12 @@ info:
|
||||||
reference:
|
reference:
|
||||||
- https://www.elttam.com/blog/goahead/
|
- https://www.elttam.com/blog/goahead/
|
||||||
- https://github.com/ivanitlearning/CVE-2017-17562
|
- https://github.com/ivanitlearning/CVE-2017-17562
|
||||||
|
- https://github.com/vulhub/vulhub/tree/master/goahead/CVE-2017-17562
|
||||||
severity: high
|
severity: high
|
||||||
tags: cve,cve2017,rce,embedthis,goahead
|
tags: cve,cve2017,rce,embedthis,goahead,fuzz
|
||||||
|
|
||||||
requests:
|
requests:
|
||||||
- payloads:
|
- payloads:
|
||||||
path:
|
|
||||||
- /
|
|
||||||
- /cgi-bin/
|
|
||||||
- /cgi/
|
|
||||||
endpoint:
|
endpoint:
|
||||||
- admin
|
- admin
|
||||||
- apply
|
- apply
|
||||||
|
@ -84,13 +81,13 @@ requests:
|
||||||
- welcome
|
- welcome
|
||||||
raw:
|
raw:
|
||||||
- |
|
- |
|
||||||
GET §path§§endpoint§?LD_DEBUG=help HTTP/1.1
|
GET /cgi-bin/§endpoint§?LD_DEBUG=help HTTP/1.1
|
||||||
Host: {{Hostname}}
|
Host: {{Hostname}}
|
||||||
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
|
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
|
||||||
Accept: */*
|
Accept: */*
|
||||||
Connection: close
|
Connection: close
|
||||||
|
|
||||||
attack: clusterbomb
|
attack: sniper
|
||||||
matchers-condition: and
|
matchers-condition: and
|
||||||
matchers:
|
matchers:
|
||||||
- type: status
|
- type: status
|
||||||
|
|
Loading…
Reference in New Issue