From 2da0804b7f2dda139018a9257af173c3ec425335 Mon Sep 17 00:00:00 2001 From: RJ45_LAB Date: Mon, 6 Jan 2025 17:38:18 +0800 Subject: [PATCH] add etcd poc add etcd poc --- WebScan/pocs/etcd-v3-unauth.yml | 12 ++++++++++++ 1 file changed, 12 insertions(+) create mode 100644 WebScan/pocs/etcd-v3-unauth.yml diff --git a/WebScan/pocs/etcd-v3-unauth.yml b/WebScan/pocs/etcd-v3-unauth.yml new file mode 100644 index 0000000..1245900 --- /dev/null +++ b/WebScan/pocs/etcd-v3-unauth.yml @@ -0,0 +1,12 @@ +name: poc-yaml-etcd-v3-unauth +rules: + - method: GET + path: /version + follow_redirects: false + expression: | + response.status == 200 && response.body.bcontains(b"etcdserver") + +detail: + author: rj45(https://github.com/INT2ECALL) + links: + - https://networksec.blog.csdn.net/article/details/144912358?spm=1001.2014.3001.5502 \ No newline at end of file