CVE-2021-22005-vmcenter-upload-toRCE.yml

name: poc-yaml-CVE-2021-22005-vmcenter-upload-toRCE
rules:
 - method: POST
   path: /analytics/telemetry/ph/api/hyper/send?_c&_i=test
   body: test
   headers:
     Content-Type: application/json
expression: |
   response.status == 201
detail:
  vulnpath: "/"
  author: mamba
  description: "vmcenter-upload-toRCE by chaosec公众号"
  links:
    - https://github.com/chaosec2021