Update docker-api-unauthorized-rce.yml (chaitin#1342)

li95 · Jul 7, 2021 · 62fb7f8 · 62fb7f8
1 parent cdd368c
commit 62fb7f8
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pocs/docker-api-unauthorized-rce.yml b/pocs/docker-api-unauthorized-rce.yml
@@ -4,7 +4,7 @@ rules:
     path: /info
     follow_redirects: false
     expression: |
-      response.status == 200 && response.body.bcontains(b"KernelVersion") && response.body.bcontains(b"RegistryConfig") && response.body.bcontains(b"DockerRootDir")
+      response.status == 200 && response.content_type.contains("json") && response.body.bcontains(b"KernelVersion") && response.body.bcontains(b"RegistryConfig") && response.body.bcontains(b"DockerRootDir")
 
 detail:
   author: j4ckzh0u(https://github.com/j4ckzh0u)