-
Notifications
You must be signed in to change notification settings - Fork 495
/
templates.json
47 lines (47 loc) · 1.89 KB
/
templates.json
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
[
{
"templateName" : "phpinfo",
"description" : "Basic php file (plain text) with simple call to phpinfo().",
"filename":"template.php",
"nastyExt":"php",
"codeExecRegex":"\\<title\\>phpinfo\\(\\)\\<\\/title\\>(.|\n)*\\<h2\\>PHP License\\<\\/h2\\>",
"extVariants":["php1","php2","php3","php4","php5","phtml","pht","Php","PhP","pHp","pHp1","pHP2","pHtMl","PHp5"]
},{
"templateName" : "nastygif",
"description" : "Valid GIF file with basic call to phpinfo() in the comments section of the file",
"filename":"template.gif",
"nastyExt":"php",
"codeExecRegex":"\\<title\\>phpinfo\\(\\)\\<\\/title\\>(.|\n)*\\<h2\\>PHP License\\<\\/h2\\>",
"extVariants":["php1","php2","php3","php4","php5","phtml","pht","Php","PhP","pHp","pHp1","pHP2","pHtMl","PHp5"]
},{
"templateName" : "nastyjpg",
"description" : "Valid JPG file with basic call to phpinfo() in the comments section of the file",
"filename":"template.jpg",
"nastyExt":"php",
"codeExecRegex":"\\<title\\>phpinfo\\(\\)\\<\\/title\\>(.|\n)*\\<h2\\>PHP License\\<\\/h2\\>",
"extVariants":["php1","php2","php3","php4","php5","phtml","pht","Php","PhP","pHp","pHp1","pHP2","pHtMl","PHp5"]
},
{
"templateName" : "basicjsp",
"description" : "Basic jsp file with simple mathematical expression.",
"filename":"template.jsp",
"nastyExt":"jsp",
"codeExecRegex":"12",
"extVariants":["JSP","jSp"]
},
{
"templateName" : "imagetragick",
"description" : "Attempts to exploit RCE in ImageMagick (CVE-2016–3714)",
"filename":"imagemagick_rce.mvg",
"codeExecRegex":"ImageTragick Detected!",
"codeExecURL":"$uploadFormDir$/$filename$.txt",
"dynamicPayload":"True"
},
{
"templateName" : "htaccess",
"description" : "Exploit apache 2.4 misconfiguration by uploading .htaccess file",
"filename":".htaccess",
"staticFilename":"True",
"codeExecRegex":"\\<title\\>phpinfo\\(\\)\\<\\/title\\>(.|\n)*\\<h2\\>PHP License\\<\\/h2\\>"
}
]