update

zan8in · Dec 22, 2023 · d11fe9c · d11fe9c
1 parent c5222a0
commit d11fe9c
Show file tree

Hide file tree

Showing 42 changed files with 40 additions and 4 deletions.
diff --git a/pocs/v/afrog-pocs.zip b/pocs/v/afrog-pocs.zip
diff --git a/pocs/v/version b/pocs/v/version
@@ -1 +1 @@
-0.3.06
+0.3.07
diff --git a/v2/pkg/config/banner.go b/v2/pkg/config/banner.go
@@ -8,7 +8,7 @@ import (
 	"github.com/zan8in/gologger"
 )
 
-const Version = "2.9.5"
+const Version = "2.9.6"
 
 func InitBanner() {
 	fmt.Printf("\r\n|\tA F 🐸 O G\t|")

diff --git a/v2/pkg/protocols/netxclient/netxclient.go b/v2/pkg/protocols/netxclient/netxclient.go
@@ -95,7 +95,8 @@ func (nc *NetClient) Request(data, dataType string, variableMap map[string]any)
 	}
 
 	variableMap["response"] = &proto.Response{
-		Raw: body,
+		Raw:  []byte(hex.EncodeToString(body)),
+		Body: []byte(hex.EncodeToString(body)),
 	}
 
 	variableMap["fulltarget"] = nc.address

diff --git a/...s/temp/afrog-pocs/cve/CVE-2023-46574.yaml → ...s/afrog-pocs/CVE/2023/CVE-2023-46574.yaml b/...s/temp/afrog-pocs/cve/CVE-2023-46574.yaml → ...s/afrog-pocs/CVE/2023/CVE-2023-46574.yaml
diff --git a/...s/temp/afrog-pocs/cve/CVE-2023-47246.yaml → ...s/afrog-pocs/CVE/2023/CVE-2023-47246.yaml b/...s/temp/afrog-pocs/cve/CVE-2023-47246.yaml → ...s/afrog-pocs/CVE/2023/CVE-2023-47246.yaml
diff --git a/...s/temp/afrog-pocs/cve/CVE-2023-49070.yaml → ...s/afrog-pocs/CVE/2023/CVE-2023-49070.yaml b/...s/temp/afrog-pocs/cve/CVE-2023-49070.yaml → ...s/afrog-pocs/CVE/2023/CVE-2023-49070.yaml
diff --git a/v2/pocs/afrog-pocs/fingerprinting/dameng-detect.yaml b/v2/pocs/afrog-pocs/fingerprinting/dameng-detect.yaml
@@ -0,0 +1,35 @@
+id: dameng-detect
+
+info:
+  name: 达梦数据库
+  author: zan8in
+  severity: info
+  verified: true
+  description: |-
+    默认端口 5236 默认密码  达梦数据库默认用户密码SYSDBA:SYSDBA
+    Fofa: protocol="dameng"
+    ZoomEye: app:"DMSQL"
+  reference:
+    - https://www.dameng.com/
+  tags: network,db,dameng
+  created: 2023/12/22
+
+set:
+  host: request.url.domain
+  hostname: request.url.host
+rules:
+  r0:
+    request:
+      type: tcp
+      host: "{{hostname}}"
+      data: "00000000c8005100000000000000000000000099000000000000000001020000000000000000000000000000000000000000000000000000000000000000000008000000382e312e312e34390040000000068149bbe004a62fb45552831704c802d4d802b4579cb045b3c6100880725ececf148a7c9205047caccadfef5ff264460d11092a3b483bf9d24382dea1dc43e7"
+      data-type: hex
+    expression: response.body.bcontains(b'00000000e400') || response.body.bcontains(b'40000000')
+  r1:
+    request:
+      type: tcp
+      host: "{{host}}:5236"
+      data: "00000000c8005100000000000000000000000099000000000000000001020000000000000000000000000000000000000000000000000000000000000000000008000000382e312e312e34390040000000068149bbe004a62fb45552831704c802d4d802b4579cb045b3c6100880725ececf148a7c9205047caccadfef5ff264460d11092a3b483bf9d24382dea1dc43e7"
+      data-type: hex
+    expression: response.body.bcontains(b'00000000e400') || response.body.bcontains(b'40000000')
+expression: r0() || r1()
diff --git a/...afrog-pocs/fingerprint/neo4j-browser.yaml → ...og-pocs/fingerprinting/neo4j-browser.yaml b/...afrog-pocs/fingerprint/neo4j-browser.yaml → ...og-pocs/fingerprinting/neo4j-browser.yaml
diff --git a/...-pocs/fingerprint/springblade-detect.yaml → ...cs/fingerprinting/springblade-detect.yaml b/...-pocs/fingerprint/springblade-detect.yaml → ...cs/fingerprinting/springblade-detect.yaml
diff --git a/...ity/chanjet-tplus-checkpassword-sqli.yaml → ...ity/chanjet-tplus-checkpassword-sqli.yaml b/...ity/chanjet-tplus-checkpassword-sqli.yaml → ...ity/chanjet-tplus-checkpassword-sqli.yaml
diff --git a/...vulnerability/dahua-icc-login-bypass.yaml → ...vulnerability/dahua-icc-login-bypass.yaml b/...vulnerability/dahua-icc-login-bypass.yaml → ...vulnerability/dahua-icc-login-bypass.yaml
diff --git a/...-portal-auth-config-reset-suffix-rce.yaml → ...-portal-auth-config-reset-suffix-rce.yaml b/...-portal-auth-config-reset-suffix-rce.yaml → ...-portal-auth-config-reset-suffix-rce.yaml
diff --git a/...aa-portal-auth-config-reset-type-rce.yaml → ...aa-portal-auth-config-reset-type-rce.yaml b/...aa-portal-auth-config-reset-type-rce.yaml → ...aa-portal-auth-config-reset-type-rce.yaml
diff --git a/...her-oa-c6-fileuploadmessage-fileread.yaml → ...her-oa-c6-fileuploadmessage-fileread.yaml b/...her-oa-c6-fileuploadmessage-fileread.yaml → ...her-oa-c6-fileuploadmessage-fileread.yaml
diff --git a/...y/kindee-scpsupreghandler-fileupload.yaml → ...y/kindee-scpsupreghandler-fileupload.yaml b/...y/kindee-scpsupreghandler-fileupload.yaml → ...y/kindee-scpsupreghandler-fileupload.yaml
diff --git a/...lnerability/ruijie-rg-eg-web-mis-rce.yaml → ...lnerability/ruijie-rg-eg-web-mis-rce.yaml b/...lnerability/ruijie-rg-eg-web-mis-rce.yaml → ...lnerability/ruijie-rg-eg-web-mis-rce.yaml
diff --git a/...ijie-rg-uac-account-password-leakage.yaml → ...ijie-rg-uac-account-password-leakage.yaml b/...ijie-rg-uac-account-password-leakage.yaml → ...ijie-rg-uac-account-password-leakage.yaml
diff --git a/...erability/ruijie-rg-uac-nmc-sync-rce.yaml → ...erability/ruijie-rg-uac-nmc-sync-rce.yaml b/...erability/ruijie-rg-uac-nmc-sync-rce.yaml → ...erability/ruijie-rg-uac-nmc-sync-rce.yaml
diff --git a/...te3600-obj-area-export-save-fileread.yaml → ...te3600-obj-area-export-save-fileread.yaml b/...te3600-obj-area-export-save-fileread.yaml → ...te3600-obj-area-export-save-fileread.yaml
diff --git a/...3600-obj-area-import-save-fileupload.yaml → ...3600-obj-area-import-save-fileupload.yaml b/...3600-obj-area-import-save-fileupload.yaml → ...3600-obj-area-import-save-fileupload.yaml
diff --git a/...te3600-obj-av-import-save-fileupload.yaml → ...te3600-obj-av-import-save-fileupload.yaml b/...te3600-obj-av-import-save-fileupload.yaml → ...te3600-obj-av-import-save-fileupload.yaml
diff --git a/...y/seeyon-management-default-password.yaml → ...y/seeyon-management-default-password.yaml b/...y/seeyon-management-default-password.yaml → ...y/seeyon-management-default-password.yaml
diff --git a/...pocs/vulnerability/sslvpn-client-rce.yaml → ...pocs/vulnerability/sslvpn-client-rce.yaml b/...pocs/vulnerability/sslvpn-client-rce.yaml → ...pocs/vulnerability/sslvpn-client-rce.yaml
diff --git a/...uperdata-designreportsave-fileupload.yaml → ...uperdata-designreportsave-fileupload.yaml b/...uperdata-designreportsave-fileupload.yaml → ...uperdata-designreportsave-fileupload.yaml
diff --git a/...nerability/topsec-maincgi-cookie-rce.yaml → ...nerability/topsec-maincgi-cookie-rce.yaml b/...nerability/topsec-maincgi-cookie-rce.yaml → ...nerability/topsec-maincgi-cookie-rce.yaml
diff --git a/...lnerability/wanhu-defaultroot-sqli-1.yaml → ...lnerability/wanhu-defaultroot-sqli-1.yaml b/...lnerability/wanhu-defaultroot-sqli-1.yaml → ...lnerability/wanhu-defaultroot-sqli-1.yaml
diff --git a/...lnerability/wanhu-defaultroot-sqli-2.yaml → ...lnerability/wanhu-defaultroot-sqli-2.yaml b/...lnerability/wanhu-defaultroot-sqli-2.yaml → ...lnerability/wanhu-defaultroot-sqli-2.yaml
diff --git a/...lnerability/wanhu-defaultroot-sqli-3.yaml → ...lnerability/wanhu-defaultroot-sqli-3.yaml b/...lnerability/wanhu-defaultroot-sqli-3.yaml → ...lnerability/wanhu-defaultroot-sqli-3.yaml
diff --git a/...vulnerability/wanhu-defaultroot-sqli.yaml → ...vulnerability/wanhu-defaultroot-sqli.yaml b/...vulnerability/wanhu-defaultroot-sqli.yaml → ...vulnerability/wanhu-defaultroot-sqli.yaml
diff --git a/...erability/wanhu-oa-documentedit-sqli.yaml → ...erability/wanhu-oa-documentedit-sqli.yaml b/...erability/wanhu-oa-documentedit-sqli.yaml → ...erability/wanhu-oa-documentedit-sqli.yaml
diff --git a/...gyou-grp-u8-SmartUpload01-fileupload.yaml → ...gyou-grp-u8-smartupload01-fileupload.yaml b/...gyou-grp-u8-SmartUpload01-fileupload.yaml → ...gyou-grp-u8-smartupload01-fileupload.yaml
diff --git a/...ity/yonyou-grp-u8-license-check-sqli.yaml → ...ity/yonyou-grp-u8-license-check-sqli.yaml b/...ity/yonyou-grp-u8-license-check-sqli.yaml → ...ity/yonyou-grp-u8-license-check-sqli.yaml
diff --git a/...ty/yonyou-grp-u8-selectdmje-jsp-sqli.yaml → ...ty/yonyou-grp-u8-selectdmje-jsp-sqli.yaml b/...ty/yonyou-grp-u8-selectdmje-jsp-sqli.yaml → ...ty/yonyou-grp-u8-selectdmje-jsp-sqli.yaml
diff --git a/...lity/yonyou-grp-u8-slbmbygr-jsp-sqli.yaml → ...lity/yonyou-grp-u8-slbmbygr-jsp-sqli.yaml b/...lity/yonyou-grp-u8-slbmbygr-jsp-sqli.yaml → ...lity/yonyou-grp-u8-slbmbygr-jsp-sqli.yaml
diff --git a/.../vulnerability/yonyou-ksoa-dept-sqli.yaml → .../vulnerability/yonyou-ksoa-dept-sqli.yaml b/.../vulnerability/yonyou-ksoa-dept-sqli.yaml → .../vulnerability/yonyou-ksoa-dept-sqli.yaml
diff --git a/...ulnerability/yonyou-ksoa-paybill-sqi.yaml → ...ulnerability/yonyou-ksoa-paybill-sqi.yaml b/...ulnerability/yonyou-ksoa-paybill-sqi.yaml → ...ulnerability/yonyou-ksoa-paybill-sqi.yaml
diff --git a/...soa-servletimagefield-skeyvalue-sqli.yaml → ...soa-servletimagefield-skeyvalue-sqli.yaml b/...soa-servletimagefield-skeyvalue-sqli.yaml → ...soa-servletimagefield-skeyvalue-sqli.yaml
diff --git a/...onyou-nccloud-uploadchunk-fileupload.yaml → ...onyou-nccloud-uploadchunk-fileupload.yaml b/...onyou-nccloud-uploadchunk-fileupload.yaml → ...onyou-nccloud-uploadchunk-fileupload.yaml
diff --git a/...yonyou-u8-cloud-registerservlet-sqli.yaml → ...yonyou-u8-cloud-registerservlet-sqli.yaml b/...yonyou-u8-cloud-registerservlet-sqli.yaml → ...yonyou-u8-cloud-registerservlet-sqli.yaml
diff --git a/...ulnerability/zfsoft-createcafile-rce.yaml → ...ulnerability/zfsoft-createcafile-rce.yaml b/...ulnerability/zfsoft-createcafile-rce.yaml → ...ulnerability/zfsoft-createcafile-rce.yaml
diff --git a/v2/pocs/temp/afrog-pocs/version b/v2/pocs/temp/afrog-pocs/version
@@ -1 +1 @@
-0.3.06
+0.3.07