New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

add some new scans #14

Open

dorkerdevil opened this issue Feb 19, 2019 · 2 comments

dorkerdevil commented Feb 19, 2019

add detection of

jexl injection
and Hubl Injection

Contributor

chriselgee commented Feb 19, 2019

Do you have sample test code and vulnerable images? I'm not personally familiar with either tactic.

Author

dorkerdevil commented Feb 20, 2019

i have some articles on it which have some info
https://appcheck-ng.com/advisory-remote-code-execution-traccar-server/
jexl- https://blog.csdn.net/aqzwss/article/details/70225883
https://twitter.com/pyn3rd/status/1097519440089047041

hubl injection
https://www.betterhacker.com/2018/12/rce-in-hubspot-with-el-injection-in-hubl.html

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment