minor changes

patch-1
sandeep 2021-04-01 13:28:30 +05:30
parent b25ba806dc
commit b273765752
2 changed files with 8 additions and 8 deletions

View File

@ -18,4 +18,7 @@ fuzzing/
helpers/ helpers/
miscellaneous/ miscellaneous/
headless/ headless/
iot/ iot/
# CVEs
cves/2017/CVE-2017-17562.yaml

View File

@ -7,15 +7,12 @@ info:
reference: reference:
- https://www.elttam.com/blog/goahead/ - https://www.elttam.com/blog/goahead/
- https://github.com/ivanitlearning/CVE-2017-17562 - https://github.com/ivanitlearning/CVE-2017-17562
- https://github.com/vulhub/vulhub/tree/master/goahead/CVE-2017-17562
severity: high severity: high
tags: cve,cve2017,rce,embedthis,goahead tags: cve,cve2017,rce,embedthis,goahead,fuzz
requests: requests:
- payloads: - payloads:
path:
- /
- /cgi-bin/
- /cgi/
endpoint: endpoint:
- admin - admin
- apply - apply
@ -84,13 +81,13 @@ requests:
- welcome - welcome
raw: raw:
- | - |
GET §path§§endpoint§?LD_DEBUG=help HTTP/1.1 GET /cgi-bin/§endpoint§?LD_DEBUG=help HTTP/1.1
Host: {{Hostname}} Host: {{Hostname}}
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1) User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1)
Accept: */* Accept: */*
Connection: close Connection: close
attack: clusterbomb attack: sniper
matchers-condition: and matchers-condition: and
matchers: matchers:
- type: status - type: status