当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2014-083271

漏洞标题:中粮我买网登录接口绕过验证码,可撞库可爆破,可造成大量金钱损失

相关厂商:中粮我买网

漏洞作者: 花心h

提交时间:2014-11-14 16:47

修复时间:2014-12-29 16:48

公开时间:2014-12-29 16:48

漏洞类型:设计缺陷/逻辑错误

危害等级:高

自评Rank:20

漏洞状态:厂商已经确认

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2014-11-14: 细节已通知厂商并且等待厂商处理中
2014-11-19: 厂商已经确认,细节仅向厂商公开
2014-11-29: 细节向核心白帽子及相关领域专家公开
2014-12-09: 细节向普通白帽子公开
2014-12-19: 细节向实习白帽子公开
2014-12-29: 细节向公众公开

简要描述:

中粮我买网登录接口未做限制,可撞库可爆破,可造成大量金钱损失,泄露用户住址电话。

详细说明:

0x01
问题存在
非HTTPS加密
验证码形同虚设,估计是以用户名的形式密码输入多少次开启验证码
登录未做IP限制,以用户名的形式来判断限制,用户名密码超过五次被冻结
0x02
利用
抓包分析,发现密码明文传输。
改包设置变量开始测试。

9.png


漏洞证明:

已有将近700人爆破成功

10.png


我分了2次爆破,上次的截图丢了。

QQ截图20141114142538.png


QQ截图20141114142718.png


QQ截图20141114142631.png


随便上了3个号测试下
还有一大波账号证明(请公开的时候大上马赛克):
egad 123456
munn 123456
eve 123456
situ 123456
erse 123456
haye 123456
cece 123456
cece 123456
daff 123456
dier 123456
usac 123456
tang 123456
bade 123456
ecla 123456
eigh 123456
eden 123456
asdf 123456
eden 123456
haha 123456
poop 123456
ania 123456
vlei 123456
ding 123456
toom 123456
geed 123456
nori 123456
iene 123456
fage 123456
ania 123456
bell 123456
nina 123456
chia 123456
dhai 123456
gadi 123456
loun 123456
call 123456
fere 123456
emma 123456
plum 123456
jass 123456
sing 123456
yuch 123456
heda 123456
sked 123456
adaw 123456
heda 123456
nina 123456
mels 123456
leap 123456
emma 123456
bell 123456
wally 123456
fast 123456
hole 123456
hung 123456
hutu 123456
chas 123456
saab 123456
pour 123456
wyly 123456
yese 123456
xing 123456
tsar 123456
reba 123456
this 123456
liba 123456
eire 123456
good 123456
jole 123456
reba 123456
lall 123456
lave 123456
chas 123456
dang 123456
huer 123456
dann 123456
diam 123456
kanu 123456
kend 123456
yoho 123456
kids 123456
prey 123456
dopp 123456
vine 123456
sirs 123456
spur 123456
stat 123456
diss 123456
windy 123456
milka 123456
novi 123456
nunu 123456
adam 123456
amia 123456
adam 123456
reese 123456
murry 123456
maxim 123456
half 123456
haik 123456
hemp 123456
aids 123456
sans 123456
qiao 123456
soul 123456
erie 123456
duer 123456
crup 123456
deed 123456
mand 123456
jinny 123456
maire 123456
erie 123456
kary 123456
arte 123456
lili 123456
kary 123456
logo 123456
gony 123456
vala 123456
weft 123456
wave 123456
usus 123456
gine 123456
teat 123456
serg 123456
scab 123456
arte 123456
rook 123456
adim 123456
lyam 123456
bara 123456
web 123456
eons 123456
bubo 123456
nama 123456
gent 123456
dren 123456
beng 123456
leve 123456
vass 123456
miguel 123456
lone 123456
louis 123456
sign 123456
jolie 123456
heil 123456
gowk 123456
remy 123456
pten 123456
caic 123456
phil 123456
lila 123456
okra 123456
livia 123456
lane 123456
phil 123456
acer 123456
titus 123456
ctrl 123456
lice 123456
tsts 123456
lila 123456
lane 123456
remy 123456
karry 123456
quip 123456
julio 123456
kaila 123456
pate 123456
lissi 123456
guib 123456
pate 123456
sully 123456
jeffry 123456
todd 123456
yuit 123456
dyne 123456
maggy 123456
dall 123456
egghead 123456
lovell 123456
todd 123456
sina 123456
kenning 123456
emmet 123456
dall 123456
conan 123456
beli 123456
fury 123456
diana 123456
lely 123456
temp 123456
amil 123456
shad 123456
TEMP 123456
temp 123456
mathew 123456
amil 123456
duncan 123456
mant 123456
sharrie 123456
bonni 123456
promise 123456
kita 123456
mommy 123456
info 123456
crystal 123456
billi 123456
fantast 123456
leconte 123456
crystal 123456
lioncel 123456
INFO 123456
budding 123456
anatman 123456
tutor 123456
judo 123456
brad 123456
pullman 123456
negroes 123456
soko 123456
gowf 123456
harper 123456
brad 123456
battery 123456
cushion 123456
cameron 123456
cameron 123456
amberly 123456
lilyan 123456
mane 123456
hendrik 123456
shooter 123456
brat 123456
mandy 123456
install 123456
evolved 123456
goodway 123456
eyeline 123456
hendrik 123456
galerie 123456
install 123456
123456
amberly 123456
ingram 123456
blessed 123456
eggroll 123456
sandler 123456
lettie 123456
iverson 123456
looking 123456
pennie 123456
trudy 123456
amity 123456
rosetta 123456
hickory 123456
besting 123456
ferrero 123456
awed 123456
marion 123456
locate 123456
clement 123456
shocker 123456
protein 123456
rosetta 123456
redbank 123456
terry 123456
clement 123456
deux 123456
airline 123456
wang 123456
wang 123456
highlow 123456
gouging 123456
janice 123456
america 123456
failing 123456
felice 123456
eskimos 123456
aspirin 123456
mirabel 123456
silvery 123456
lovered 123456
mirabel 123456
jessie 123456
dinnie 123456
caramel 123456
bossing 123456
harrier 123456
lins 123456
cecilia 123456
cecilia 123456
quarles 123456
shrilly 123456
idyllic 123456
leeanne 123456
leeanne 123456
isaiah 123456
shivery 123456
lorraine 123456
lauralee 123456
rachelle 123456
fantastic 123456
blackeyes 123456
davidson 123456
paraclete 123456
prominent 123456
butterfly 123456
sherilyn 123456
stockholm 123456
ljubljana 123456
christin 123456
isabelle 123456
honestone 123456
prescott 123456
prodigies 123456
unruffled 123456
sainthood 123456
sallyanne 123456
encounter 123456
billionth 123456
sallyanne 123456
charlene 123456
insurance 123456
beatrice 123456
wolverine 123456
nathaniel 123456
tormentor 123456
greenways 123456
gascoigne 123456
nathaniel 123456
stefanie 123456
lamplight 123456
dominick 123456
raceabout 123456
bedlamite 123456
webmaster 123456
webmaster 123456
australia 123456
refueling 123456
sebastian 123456
sebastian 123456
favourite 123456
summerlee 123456
jh 123456
asdd 123456
2010 123456
asdf 123456
tang 123456
asdf 123456
haha 123456
wally 123456
zxcvb 123456
good 123456
xing 123456
qwe123 123456
qwe123 123456
nvnv 123456
zhang 123456
adam 123456
nunu 123456
test2 123456
yahoo 123456
fucku 123456
china 123456
lili 123456
china 123456
web 123456
tester 123456
air 123456
xm001 123456
acer 123456
qqqqq 123456
axiao 123456
test5 123456
liull 123456
nanren 123456
delphi 123456
welling 123456
xyan 123456
wuwuwu 123456
axiao 123456
xiaowu 123456
sina 123456
bigman 123456
nnnnnn 123456
730512 123456
temp 123456
aaa111 123456
design 123456
diana 123456
symbol 123456
sb123 123456
iloveu 123456
baidu 123456
crystal 123456
qweqwe 123456
info 123456
crystal 123456
twister 123456
value 123456
yudong 123456
sisisi 123456
shooter 123456
unknown 123456
sunshin 123456
office 123456
343434 123456
unknown 123456
shadow1 123456
wisdom 123456
wangwei 123456
wisdom 123456
sunshin 123456
chenlr 123456
zyzy 123456
yanking 123456
casio 123456
goodme 123456
7758521 123456
guiying 123456
twinkle 123456
succour 123456
zeroing 123456
donkey 123456
terry 123456
violina 123456
maomao3 123456
fengyi 123456
volumen 123456
wang 123456
templar 123456
america 123456
vacuous 123456
unicity 123456
jessie 123456
spunky 123456
zhongguo 123456
qq123456 123456
rabbit123 123456
jiangyin 123456
abcd1234 123456
abcd1234 123456
worinima 123456
xiaogang 123456
yongming 123456
christin 123456
zhongjing 123456
webmaster 123456
shenlijuan 123456
training 123456
fulful 123456
miguel 123456
felony 123456
fanger 123456
buying 123456
crunch 123456
aweigh 123456
delphi 123456
little 123456
dagger 123456
lovery 123456
alight 123456
appeal 123456
dinghy 123456
dingee 123456
lovell 123456
feiner 123456
header 123456
ergate 123456
elison 123456
jeffry 123456
morphy 123456
jerker 123456
bigman 123456
mercia 123456
colour 123456
gazebo 123456
mather 123456
mathew 123456
design 123456
iceman 123456
poodle 123456
humble 123456
persue 123456
invoke 123456
mallen 123456
cocoon 123456
changa 123456
eleven 123456
kokomo 123456
manage 123456
ganser 123456
duncan 123456
challa 123456
banned 123456
incher 123456
passer 123456
agrace 123456
makeup 123456
clucky 123456
longyi 123456
lounge 123456
popish 123456
harper 123456
cercis 123456
herson 123456
linten 123456
assess 123456
office 123456
onlook 123456
panner 123456
online 123456
lilyan 123456
lydell 123456
earthy 123456
bailly 123456
lamper 123456
lettie 123456
marion 123456
maurus 123456
maying 123456
luluai 123456
randel 123456
blared 123456
pennie 123456
ingram 123456
fairly 123456
beauti 123456
locate 123456
coocoo 123456
kabuki 123456
diesel 123456
croton 123456
dodoma 123456
donkey 123456
charon 123456
hooter 123456
italia 123456
janice 123456
lucken 123456
kingly 123456
editor 123456
felice 123456
fukuda 123456
alcina 123456
ranita 123456
damask 123456
birder 123456
jessie 123456
hebbel 123456
dinnie 123456
isaiah 123456
前面是账号,后面是密码。

修复方案:

1,HTTPs
2,IP限制
3,你们比我专业

版权声明:转载请注明来源 花心h@乌云


漏洞回应

厂商回应:

危害等级:高

漏洞Rank:10

确认时间:2014-11-19 08:59

厂商回复:

谢谢

最新状态:

暂无