mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-05-05 10:17:57 +00:00
26 lines
941 B
Markdown
26 lines
941 B
Markdown
|
# Vben-Admin存在硬编码漏洞
|
|||
|
|
<font style="color:rgba(0, 0, 0, 0.84);">Vue Vben Admin是一个免费开源的中端和后端模板。采用最新的vue3、vite、TypeScript等主流技术开发，开箱即用的中后端前端解决方案也可供学习参考。Vue Vben存在硬编码漏洞</font>
|
|||
|
|
|
|||
|
|
## fofa
|
|||
|
|
```javascript
|
|||
|
|
icon_hash="-317536629"
|
|||
|
|
```
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
## poc
|
|||
|
|
登录页面，右击查看源代码，搜索index，进入该js页面
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
该页面硬编码登录账号密码
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
使用账号密码登录系统
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|
|||
|
|
|