springblade-detect: SpringBlade 框架

2025-08-01 springblade-detect PoC Public

Description

SpringBlade 是一个由商业级项目升级优化而来的SpringCloud分布式微服务架构、SpringBoot单体式微服务架构并存的综合型项目。</p><p>SpringBlade 框架存在默认SIGN_KEY，攻击者可利用漏洞获取用户账号密码日志等敏感信息。

fofa: body="saber/iconfont.css" || body="Saber 将不能正常工作"||title="Sword Admin"||body="We're sorry but avue-data doesn't work"

PoC

id: springblade-detect

info:
  name: SpringBlade 框架
  author: zan8in
  severity: info
  verified: true
  description: |-
    SpringBlade 是一个由商业级项目升级优化而来的SpringCloud分布式微服务架构、SpringBoot单体式微服务架构并存的综合型项目。</p><p>SpringBlade 框架存在默认SIGN_KEY，攻击者可利用漏洞获取用户账号密码日志等敏感信息。
    fofa: body="saber/iconfont.css" || body="Saber 将不能正常工作"||title="Sword Admin"||body="We're sorry but avue-data doesn't work"
  tags: springblade,detect
  created: 2023/12/12

rules:
  r0:
    request:
      method: GET
      path: /#/login
      follow_redirects: true
    expression: |
      response.body.bcontains(b'saber/iconfont.css') || 
      response.body.bcontains(b'Saber 将不能正常工作') || 
      response.body.bcontains(b"We're sorry but avue-data doesn't work") || 
      response.body.ibcontains(b'<title>Sword Admin')
  r1:
    request:
      method: GET
      path: /
      follow_redirects: true
    expression: |
      response.body.bcontains(b'saber/iconfont.css') || 
      response.body.bcontains(b'Saber 将不能正常工作') || 
      response.body.bcontains(b"We're sorry but avue-data doesn't work") || 
      response.body.ibcontains(b'<title>Sword Admin')
expression: r0() || r1()

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.
Source: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/fingerprinting/springblade-detect.yaml

References

Related Vulnerabilities