增加resin任意文件读取poc

2017-06-30 17:27:39 +08:00
parent 5639bc9719
commit 5abd956fed
9 changed files with 100 additions and 12 deletions
--- a/pocdb.py
+++ b/pocdb.py
@@ -292,6 +292,7 @@ class pocdb_pocs:
            "深澜软件srun3000计费系统user_info.php命令执行":srun_user_info_uid_rce_BaseVerify(url),
            "intel AMT web系统绕过登录(CVE-2017-5689)":intel_amt_crypt_bypass_BaseVerify(url),
            "smtp starttls明文命令注入(CVE-2011-0411)":smtp_starttls_plaintext_inj_BaseVerify(url),
+            "resin viewfile 任意文件读取":resin_viewfile_fileread_BaseVerify(url),
        }
        self.hardwarepocdict = {
            "Dlink 本地文件包含":router_dlink_webproc_fileread_BaseVerify(url),