mirror of https://github.com/qwqdanchun/fscan.git
15 lines
386 B
YAML
15 lines
386 B
YAML
name: poc-yaml-kong-cve-2020-11710-unauth
|
|
rules:
|
|
- method: GET
|
|
path: /
|
|
expression: |
|
|
response.status == 200 && response.body.bcontains(b"kong_env")
|
|
- method: GET
|
|
path: /status
|
|
expression: |
|
|
response.status == 200 && response.body.bcontains(b"kong_db_cache_miss")
|
|
detail:
|
|
author: Loneyer
|
|
links:
|
|
- https://mp.weixin.qq.com/s/Ttpe63H9lQe87Uk0VOyMFw
|