From 7c7d75a55e5562bec2ddc8fcfd128b704b6bdbeb Mon Sep 17 00:00:00 2001 From: pentesttoolscom Date: Mon, 7 Aug 2023 17:20:04 +0300 Subject: [PATCH 1/4] Fix apache-rocketmq-broker-unauth.yaml --- .../apache-rocketmq-broker-unauth.yaml | 23 +++++++++++++------ 1 file changed, 16 insertions(+), 7 deletions(-) diff --git a/network/misconfig/apache-rocketmq-broker-unauth.yaml b/network/misconfig/apache-rocketmq-broker-unauth.yaml index ac2da34fcd..c04540e24a 100644 --- a/network/misconfig/apache-rocketmq-broker-unauth.yaml +++ b/network/misconfig/apache-rocketmq-broker-unauth.yaml @@ -25,11 +25,20 @@ tcp: - "{{Host}}:10911" read-size: 2048 + matchers-condition: and matchers: - - type: word - words: - - serializeTypeCurrentRPC - - language - - opaque - - version - condition: and \ No newline at end of file + - type: word + words: + - serializeTypeCurrentRPC + - language + - opaque + - version + condition: and + - type: word + words: + - denied + - Bad request + - HTTP/1.1 + - 400 + condition: or + negative: true \ No newline at end of file From 4814271ae67055827d8b11dbded6b42f4439816d Mon Sep 17 00:00:00 2001 From: pentesttoolscom Date: Tue, 8 Aug 2023 10:13:14 +0300 Subject: [PATCH 2/4] Fix linting --- .../misconfig/apache-rocketmq-broker-unauth.yaml | 16 ++++++++-------- 1 file changed, 8 insertions(+), 8 deletions(-) diff --git a/network/misconfig/apache-rocketmq-broker-unauth.yaml b/network/misconfig/apache-rocketmq-broker-unauth.yaml index c04540e24a..7e41f8fbc0 100644 --- a/network/misconfig/apache-rocketmq-broker-unauth.yaml +++ b/network/misconfig/apache-rocketmq-broker-unauth.yaml @@ -29,16 +29,16 @@ tcp: matchers: - type: word words: - - serializeTypeCurrentRPC - - language - - opaque - - version + - serializeTypeCurrentRPC + - language + - opaque + - version condition: and - type: word words: - - denied - - Bad request - - HTTP/1.1 - - 400 + - denied + - Bad request + - HTTP/1.1 + - 400 condition: or negative: true \ No newline at end of file From 1e2502b32b336f157308860fde74fadb442f903a Mon Sep 17 00:00:00 2001 From: pussycat0x <65701233+pussycat0x@users.noreply.github.com> Date: Tue, 8 Aug 2023 22:43:47 +0530 Subject: [PATCH 3/4] matchers - update --- network/misconfig/apache-rocketmq-broker-unauth.yaml | 9 +++------ 1 file changed, 3 insertions(+), 6 deletions(-) diff --git a/network/misconfig/apache-rocketmq-broker-unauth.yaml b/network/misconfig/apache-rocketmq-broker-unauth.yaml index 7e41f8fbc0..877617d8cb 100644 --- a/network/misconfig/apache-rocketmq-broker-unauth.yaml +++ b/network/misconfig/apache-rocketmq-broker-unauth.yaml @@ -34,11 +34,8 @@ tcp: - opaque - version condition: and + - type: word words: - - denied - - Bad request - - HTTP/1.1 - - 400 - condition: or - negative: true \ No newline at end of file + - "HTTP/1.1" + negative: true From 2fad1e958e9365c3acd7312b2a893b8241221755 Mon Sep 17 00:00:00 2001 From: pussycat0x <65701233+pussycat0x@users.noreply.github.com> Date: Tue, 8 Aug 2023 22:52:06 +0530 Subject: [PATCH 4/4] Update apache-rocketmq-broker-unauth.yaml --- .../apache-rocketmq-broker-unauth.yaml | 22 +++++++++---------- 1 file changed, 11 insertions(+), 11 deletions(-) diff --git a/network/misconfig/apache-rocketmq-broker-unauth.yaml b/network/misconfig/apache-rocketmq-broker-unauth.yaml index 877617d8cb..f66bbbe081 100644 --- a/network/misconfig/apache-rocketmq-broker-unauth.yaml +++ b/network/misconfig/apache-rocketmq-broker-unauth.yaml @@ -27,15 +27,15 @@ tcp: matchers-condition: and matchers: - - type: word - words: - - serializeTypeCurrentRPC - - language - - opaque - - version - condition: and + - type: word + words: + - serializeTypeCurrentRPC + - language + - opaque + - version + condition: and - - type: word - words: - - "HTTP/1.1" - negative: true + - type: word + words: + - "HTTP/1.1" + negative: true