修复端口扫描和指纹扫描阻塞无法扫描漏洞的bug

aaq1adqwe · Jun 19, 2019 · ede64c4 · ede64c4
1 parent dc89430
commit ede64c4
Showing 1 changed file with 10 additions and 0 deletions.
diff --git a/module/src/main/java/com/trackray/module/inner/SimpleVulRule.java b/module/src/main/java/com/trackray/module/inner/SimpleVulRule.java
@@ -161,6 +161,16 @@ public boolean fun(HttpResponse response) throws Exception {
                         ).build()
         );
 
+        loaders.add(Payloader.builder()
+                .url("/mailsms/s?func=ADMIN:appState&dumpConfig=/")
+                .containsStr("/home/coremail")
+                .vuln(Vulnerable.builder()
+                        .title("Coremail 信息泄露漏洞")
+                        .level(Vulnerable.Level.HIGH.getLevel())
+                        .type(Vulnerable.Type.INFO_LEAKAGE.getType())
+                        .build())
+                .build());
+
         loaders.add(
                 Payloader.builder().url("/WebResource.axd?d=AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA1")
                         .containsStr("Microsoft .NET Framework")