xray icon indicating copy to clipboard operation
xray copied to clipboard

Published 20 hours ago • verified publisher icon chaitin

ruijie-phpinfo-leak

Open WHIJK opened this issue 3 years ago • 3 comments

本 poc 是检测锐捷EG易网关WEB管理系统phpinfo信息泄露漏洞

测试环境

"@2000-2015 锐捷网络"

备注

image

WHIJK avatar May 07 '21 09:05 WHIJK

PoC 需要放在 pocs/ 目录下

smile-jpg avatar May 08 '21 10:05 smile-jpg

PoC 需要放在 pocs/ 目录下

已修改，感谢指正

WHIJK avatar May 10 '21 02:05 WHIJK

请将v1版本转为v2版本，且直接判断这个关键词规则较弱，建议参考response.body.bcontains(b'<title>phpinfo()</title>') ||(response.body.bcontains(b'allow_url_fopen') && response.body.bcontains(b'upload_max_filesize')) 进行修改

Jarcis-cy avatar Apr 25 '22 03:04 Jarcis-cy

可以修改后重新提交，或者前往社区提交

Jarcis-cy avatar Dec 05 '22 06:12 Jarcis-cy