diff --git a/Kyan/Kyan_time_RCE/README.md b/Kyan/Kyan_time_RCE/README.md new file mode 100644 index 0000000..f37c5f9 --- /dev/null +++ b/Kyan/Kyan_time_RCE/README.md @@ -0,0 +1,9 @@ +# Kyan Network monitoring time RCE + +Kyan network monitoring equipment time.php can execute arbitrary commands after authentication, and can obtain server permissions with the account password leaked by the host. + +FOFA **query rule**: [app="Kyan设计"](https://fofa.so/result?qbase64=YXBwPSJLeWFu6K6%2B6K6hIg%3D%3D) + +# Demo + +![Kyan_Network_monitoring_time_RCE](Kyan_Network_monitoring_time_RCE.gif)