CVE-2020-11710.yml

name: poc-yaml-kong-cve-2020-11710-unauth
manual: true
transport: http
rules:
    r0:
        request:
            cache: true
            method: GET
            path: /
        expression: response.status == 200 && response.body.bcontains(b"kong_env")
    r1:
        request:
            cache: true
            method: GET
            path: /status
        expression: response.status == 200 && response.body.bcontains(b"kong_db_cache_miss")
expression: r0() && r1()
detail:
    author: Loneyer
    links:
        - https://mp.weixin.qq.com/s/Ttpe63H9lQe87Uk0VOyMFw