当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2016-0194576

漏洞标题:四川航空某处验证码突破导致泄漏员工敏感信息(10w员工信息)

相关厂商:四川航空股份有限公司

漏洞作者: 艺术家

提交时间:2016-04-10 14:13

修复时间:2016-05-26 11:20

公开时间:2016-05-26 11:20

漏洞类型:后台弱口令

危害等级:高

自评Rank:20

漏洞状态:厂商已经确认

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2016-04-10: 细节已通知厂商并且等待厂商处理中
2016-04-11: 厂商已经确认,细节仅向厂商公开
2016-04-21: 细节向核心白帽子及相关领域专家公开
2016-05-01: 细节向普通白帽子公开
2016-05-11: 细节向实习白帽子公开
2016-05-26: 细节向公众公开

简要描述:

RT

详细说明:

找到domino的服务器。看到验证码太弱了。可爆破

4.jpg


用PKAV的工具爆破:

6.jpg

如图配置。跑出密码

8.jpg


跑出几个帐号密码,其实跑出一个就够了。完全可以列所有密码了。
登陆地址:http://mail.scal.com.cn/names.nsf?Login
跑出7个账号。

zhangmin zhangjie   wangli   limin  wanglei   wangyan  密码为123456a    lijie  a123456


登陆进去后,可列出所有员工的密码信息,domino特性。
泄漏103077员工信息

1.jpg


可遍历所有员工 帐号,密码HASH,邮箱。
举个例子:

ame	ListName & FullName	FullName	ListName	Members	MailServer	MailFile	MailDomain	MailAddress	ShortName	Location	EncryptIncomingMail	CalendarDomain	NetUserName	HTTPPassword	CertThumbprint	InternetAddress	NewMailServer	NewMailFile	AltFullName	MessageStorage	ServerName	AltFullNameLanguage	$QuickPlace	SametimeServer	Type	MailSystem	$AdminpOldWebName	HTTPPasswordChangeDate	HTTPPasswordForceChange	Policy	LTPA_UsrNm	DB2UserName	Crypto Cap
黄静 CN=黄静/O=SCAL,黄静,005429,huangjing CN=黄静/O=SCAL,黄静,005429,huangjing CN=CorpMail/O=SCAL mail\005429 SCAL 黄静 0 (GVXMpJqCkgTHOAEI3j8r) 1JNHP 6PJAD 7B2HZ W917C Y5NW1 C44EF [email protected] 2 Person 1 2012-10-24 15:42:05 uid=005429/cn=users/DC=SCAL/DC=COM 0
黄静/scal CN=黄静/O=SCAL,黄静,005429,huangjing CN=黄静/O=SCAL,黄静,005429,huangjing CN=CorpMail/O=SCAL mail\005429 SCAL 黄静 0 (GVXMpJqCkgTHOAEI3j8r) 1JNHP 6PJAD 7B2HZ W917C Y5NW1 C44EF [email protected] 2 Person 1 2012-10-24 15:42:05 uid=005429/cn=users/DC=SCAL/DC=COM 0
黄韬 CN=黄韬/O=SCAL,黄韬,011893,huangtao CN=黄韬/O=SCAL,黄韬,011893,huangtao CN=CorpMail/O=SCAL mail\011893 黄韬 0 (Gk1YerdmUulhZ/gN1fID) 1G3S8 U3EGJ 3BPEF NUD7U XRFKV Q14E6 [email protected] 2 Person 1 2014-09-06 03:08:45 uid=011893/cn=users/DC=SCAL/DC=COM 0
黄韬/scal CN=黄韬/O=SCAL,黄韬,011893,huangtao CN=黄韬/O=SCAL,黄韬,011893,huangtao CN=CorpMail/O=SCAL mail\011893 黄韬 0 (Gk1YerdmUulhZ/gN1fID) 1G3S8 U3EGJ 3BPEF NUD7U XRFKV Q14E6 [email protected] 2 Person 1 2014-09-06 03:08:45 uid=011893/cn=users/DC=SCAL/DC=COM 0
黄韵 CN=黄韵/O=SCAL,黄韵,003920,huangyun CN=黄韵/O=SCAL,黄韵,003920,huangyun CN=CorpMail/O=SCAL mail\003920 SCAL 黄韵 0 (GtJeu1yrMMlAZRNcvyd8) 1S8UN FJ4RB EZBFJ TE26Y PGWRF G5417 [email protected] 2 Person 1 2012-10-24 15:00:24 uid=003920/cn=users/DC=SCAL/DC=COM 0
黄韵 CN=黄韵洁/O=SCAL,黄韵洁,012424,huangyunjie CN=黄韵洁/O=SCAL,黄韵洁,012424,huangyunjie CN=CorpMail/O=SCAL mail\012424 黄韵 0 (GV+dh4U3xEpi2JhoD9O1) 1JFC5 AMEZ1 QK53K HDK5V XENVF 83441 [email protected] 2 Person 1 2015-01-24 03:08:08 uid=012424/cn=users/DC=SCAL/DC=COM 0
黄韵/scal CN=黄韵/O=SCAL,黄韵,003920,huangyun CN=黄韵/O=SCAL,黄韵,003920,huangyun CN=CorpMail/O=SCAL mail\003920 SCAL 黄韵 0 (GtJeu1yrMMlAZRNcvyd8) 1S8UN FJ4RB EZBFJ TE26Y PGWRF G5417 [email protected] 2 Person 1 2012-10-24 15:00:24 uid=003920/cn=users/DC=SCAL/DC=COM 0
黄韵洁 CN=黄韵洁/O=SCAL,黄韵洁,012424,huangyunjie CN=黄韵洁/O=SCAL,黄韵洁,012424,huangyunjie CN=CorpMail/O=SCAL mail\012424 黄韵 0 (GV+dh4U3xEpi2JhoD9O1) 1JFC5 AMEZ1 QK53K HDK5V XENVF 83441 [email protected] 2 Person 1 2015-01-24 03:08:08 uid=012424/cn=users/DC=SCAL/DC=COM 0
黄韵洁/scal CN=黄韵洁/O=SCAL,黄韵洁,012424,huangyunjie CN=黄韵洁/O=SCAL,黄韵洁,012424,huangyunjie CN=CorpMail/O=SCAL mail\012424 黄韵 0 (GV+dh4U3xEpi2JhoD9O1) 1JFC5 AMEZ1 QK53K HDK5V XENVF 83441 [email protected] 2 Person 1 2015-01-24 03:08:08 uid=012424/cn=users/DC=SCAL/DC=COM 0
黄颖 CN=黄颖/O=SCAL,黄颖,001800,huangying CN=黄颖/O=SCAL,黄颖,001800,huangying CN=CorpMail/O=SCAL mail\001800 SCAL 黄颖 0 (G+ldWNAAVGlFrViLDph9) 1H3MM B15X9 ZGU1N JKZZR A44B7 K1461 [email protected] 2 Person 1 2013-08-31 03:46:09 uid=001800/cn=users/DC=SCAL/DC=COM 0
黄颖/scal CN=黄颖/O=SCAL,黄颖,001800,huangying CN=黄颖/O=SCAL,黄颖,001800,huangying CN=CorpMail/O=SCAL mail\001800 SCAL 黄颖 0 (G+ldWNAAVGlFrViLDph9) 1H3MM B15X9 ZGU1N JKZZR A44B7 K1461 [email protected] 2 Person 1 2013-08-31 03:46:09 uid=001800/cn=users/DC=SCAL/DC=COM 0
黄颖超 CN=黄颖超/O=SCAL,黄颖超,006228,huangyingchao CN=黄颖超/O=SCAL,黄颖超,006228,huangyingchao CN=CorpMail/O=SCAL mail\006228 SCAL 黄颖超 0 (GMLGfewPAxkpClB5pnwt) 1QQQ4 DE76C 77W66 5HF1N 51RDK V44A1 [email protected] 2 Person 1 2012-10-24 16:03:21 uid=006228/cn=users/DC=SCAL/DC=COM 0
黄颖超/scal CN=黄颖超/O=SCAL,黄颖超,006228,huangyingchao CN=黄颖超/O=SCAL,黄颖超,006228,huangyingchao CN=CorpMail/O=SCAL mail\006228 SCAL 黄颖超 0 (GMLGfewPAxkpClB5pnwt) 1QQQ4 DE76C 77W66 5HF1N 51RDK V44A1 [email protected] 2 Person 1 2012-10-24 16:03:21 uid=006228/cn=users/DC=SCAL/DC=COM 0
黄飞鹏 CN=黄飞鹏/O=SCAL,黄飞鹏,002369,huangfeipeng CN=黄飞鹏/O=SCAL,黄飞鹏,002369,huangfeipeng CN=CorpMail/O=SCAL mail\002369 SCAL 黄飞鹏 0 (GE10bhR1w1TLqB/swZcZ) 1U35D EQRQE N28GN GR4E5 CG7WK P64FE [email protected] 2 Person 1 2012-10-24 14:21:54 uid=002369/cn=users/DC=SCAL/DC=COM 0
黄飞鹏/scal CN=黄飞鹏/O=SCAL,黄飞鹏,002369,huangfeipeng CN=黄飞鹏/O=SCAL,黄飞鹏,002369,huangfeipeng CN=CorpMail/O=SCAL mail\002369 SCAL 黄飞鹏 0 (GE10bhR1w1TLqB/swZcZ) 1U35D EQRQE N28GN GR4E5 CG7WK P64FE [email protected] 2 Person 1 2012-10-24 14:21:54 uid=002369/cn=users/DC=SCAL/DC=COM 0
黄馨 CN=黄馨允/O=SCAL,黄馨允,009881,huangxinyun CN=黄馨允/O=SCAL,黄馨允,009881,huangxinyun CN=CorpMail/O=SCAL mail\009881 SCAL 黄馨 0 (GMZlFafHwlLZvaID3Jdi) 1VK5W JFBZX PKF6B 2N44U GS5X3 D54C3 [email protected] 2 Person 1 2013-01-23 01:53:42 uid=009881/cn=users/DC=SCAL/DC=COM 0
黄馨允 CN=黄馨允/O=SCAL,黄馨允,009881,huangxinyun CN=黄馨允/O=SCAL,黄馨允,009881,huangxinyun CN=CorpMail/O=SCAL mail\009881 SCAL 黄馨 0 (GMZlFafHwlLZvaID3Jdi) 1VK5W JFBZX PKF6B 2N44U GS5X3 D54C3 [email protected] 2 Person 1 2013-01-23 01:53:42 uid=009881/cn=users/DC=SCAL/DC=COM 0
黄馨允/scal CN=黄馨允/O=SCAL,黄馨允,009881,huangxinyun CN=黄馨允/O=SCAL,黄馨允,009881,huangxinyun CN=CorpMail/O=SCAL mail\009881 SCAL 黄馨 0 (GMZlFafHwlLZvaID3Jdi) 1VK5W JFBZX PKF6B 2N44U GS5X3 D54C3 [email protected] 2 Person 1 2013-01-23 01:53:42 uid=009881/cn=users/DC=SCAL/DC=COM 0
黄鹏 CN=黄鹏/O=SCAL,黄鹏,000688,huangpeng CN=黄鹏/O=SCAL,黄鹏,000688,huangpeng CN=CorpMail/O=SCAL mail\000688 SCAL 黄鹏 0 (GphxkDoOR3x5oboKxhjm) 1Z61W 4PWFS 1DV2E 1F469 ESK6Z K746A [email protected] 2 Person 1 2012-11-27 11:17:27 uid=000688/cn=users/DC=SCAL/DC=COM 0
黄鹏 CN=黄鹏诚/O=SCAL,黄鹏诚,009727,huangpengcheng CN=黄鹏诚/O=SCAL,黄鹏诚,009727,huangpengcheng CN=CorpMail/O=SCAL mail\009727 SCAL 黄鹏 0 (GWKE7lOnOaskCV2L96Hf) 13E3W G5RNM HBUH6 XDEET TDK6G G341F [email protected] 2 Person 1 2012-12-04 01:54:45 uid=009727/cn=users/DC=SCAL/DC=COM 0
黄鹏/scal CN=黄鹏/O=SCAL,黄鹏,000688,huangpeng CN=黄鹏/O=SCAL,黄鹏,000688,huangpeng CN=CorpMail/O=SCAL mail\000688 SCAL 黄鹏 0 (GphxkDoOR3x5oboKxhjm) 1Z61W 4PWFS 1DV2E 1F469 ESK6Z K746A [email protected] 2 Person 1 2012-11-27 11:17:27 uid=000688/cn=users/DC=SCAL/DC=COM 0
黄鹏翔 CN=黄鹏翔/O=SCAL,黄鹏翔,006253,huangpengxiang CN=黄鹏翔/O=SCAL,黄鹏翔,006253,huangpengxiang CN=CorpMail/O=SCAL mail\006253 SCAL 黄鹏翔 0 (G2NnHe2h90UsQA37ixW8) 1WRDE K9M9S H4ZBR 89F8M ZW6E4 6144E [email protected] 2 Person 1 2012-10-24 16:03:58 uid=006253/cn=users/DC=SCAL/DC=COM 0
黄鹏翔/scal CN=黄鹏翔/O=SCAL,黄鹏翔,006253,huangpengxiang CN=黄鹏翔/O=SCAL,黄鹏翔,006253,huangpengxiang CN=CorpMail/O=SCAL mail\006253 SCAL 黄鹏翔 0 (G2NnHe2h90UsQA37ixW8) 1WRDE K9M9S H4ZBR 89F8M ZW6E4 6144E [email protected] 2 Person 1 2012-10-24 16:03:58 uid=006253/cn=users/DC=SCAL/DC=COM 0
黄鹏诚 CN=黄鹏诚/O=SCAL,黄鹏诚,009727,huangpengcheng CN=黄鹏诚/O=SCAL,黄鹏诚,009727,huangpengcheng CN=CorpMail/O=SCAL mail\009727 SCAL 黄鹏 0 (GWKE7lOnOaskCV2L96Hf) 13E3W G5RNM HBUH6 XDEET TDK6G G341F [email protected] 2 Person 1 2012-12-04 01:54:45 uid=009727/cn=users/DC=SCAL/DC=COM 0
黄鹏诚/scal CN=黄鹏诚/O=SCAL,黄鹏诚,009727,huangpengcheng CN=黄鹏诚/O=SCAL,黄鹏诚,009727,huangpengcheng CN=CorpMail/O=SCAL mail\009727 SCAL 黄鹏 0 (GWKE7lOnOaskCV2L96Hf) 13E3W G5RNM HBUH6 XDEET TDK6G G341F [email protected] 2 Person 1 2012-12-04 01:54:45 uid=009727/cn=users/DC=SCAL/DC=COM 0
黄鹤 CN=黄鹤东/O=SCAL,黄鹤东,013270,huanghedong CN=黄鹤东/O=SCAL,黄鹤东,013270,huanghedong CN=CorpMail/O=SCAL mail\013270 黄鹤 0 (GnZ96jxMechhQ6+VAC0S) 159KY BH7SW YQXFC XTTWC DD4DX C64GA [email protected] 2 Person 1 2015-10-19 20:57:13 uid=013270/cn=users/DC=SCAL/DC=COM 0
黄鹤东 CN=黄鹤东/O=SCAL,黄鹤东,013270,huanghedong CN=黄鹤东/O=SCAL,黄鹤东,013270,huanghedong CN=CorpMail/O=SCAL mail\013270 黄鹤 0 (GnZ96jxMechhQ6+VAC0S) 159KY BH7SW YQXFC XTTWC DD4DX C64GA [email protected] 2 Person 1 2015-10-19 20:57:13 uid=013270/cn=users/DC=SCAL/DC=COM 0
黄鹤东/scal CN=黄鹤东/O=SCAL,黄鹤东,013270,huanghedong CN=黄鹤东/O=SCAL,黄鹤东,013270,huanghedong CN=CorpMail/O=SCAL mail\013270 黄鹤 0 (GnZ96jxMechhQ6+VAC0S) 159KY BH7SW YQXFC XTTWC DD4DX C64GA [email protected] 2 Person 1 2015-10-19 20:57:13 uid=013270/cn=users/DC=SCAL/DC=COM 0
黄龙 CN=黄龙/O=SCAL,黄龙,010627,huanglong CN=黄龙/O=SCAL,黄龙,010627,huanglong CN=CorpMail/O=SCAL mail\010627 SCAL 黄龙 0 (GerA1JK3FhE+3w82vl1V) 1J3AQ W762E XH2YJ TSAPZ B9A1C W34D8 [email protected] 2 Person 1 2013-10-19 01:49:21 uid=010627/cn=users/DC=SCAL/DC=COM 0
黄龙/scal CN=黄龙/O=SCAL,黄龙,010627,huanglong CN=黄龙/O=SCAL,黄龙,010627,huanglong CN=CorpMail/O=SCAL mail\010627 SCAL 黄龙 0 (GerA1JK3FhE+3w82vl1V) 1J3AQ W762E XH2YJ TSAPZ B9A1C W34D8 [email protected] 2 Person 1 2013-10-19 01:49:21 uid=010627/cn=users/DC=SCAL/DC=COM 0
黄龙翔 CN=黄龙翔/O=SCAL,黄龙翔,007955,huanglongxiang, CN=黄龙翔/O=SCAL,黄龙翔,007955,huanglongxiang, CN=CorpMail/O=SCAL mail\007955 SCAL 黄龙翔 0 (GEcYOm70LkAGytamD/hk) 19EG9 TUT3R 3BX2V QUCEU 5KNEX 68425 [email protected] 2 Person 1 2012-10-24 16:49:53 uid=007955/cn=users/DC=SCAL/DC=COM 0
黄龙翔/scal CN=黄龙翔/O=SCAL,黄龙翔,007955,huanglongxiang, CN=黄龙翔/O=SCAL,黄龙翔,007955,huanglongxiang, CN=CorpMail/O=SCAL mail\007955 SCAL 黄龙翔 0 (GEcYOm70LkAGytamD/hk) 19EG9 TUT3R 3BX2V QUCEU 5KNEX 68425 [email protected] 2 Person 1 2012-10-24 16:49:53 uid=007955/cn=users/DC=SCAL/DC=COM 0
黎元元 CN=黎元元/O=SCAL,黎元元,004977,liyuanyuan CN=黎元元/O=SCAL,黎元元,004977,liyuanyuan CN=CorpMail/O=SCAL mail\004977 SCAL 黎元元 0 (GzvrXqMNR4JpUhEv+qUL) 1Z4AM CRUCN EKYMM YVWPD 5CEF9 51437 [email protected] 2 Person 1 2012-10-24 15:29:52 uid=004977/cn=users/DC=SCAL/DC=COM 0
黎元元/scal CN=黎元元/O=SCAL,黎元元,004977,liyuanyuan CN=黎元元/O=SCAL,黎元元,004977,liyuanyuan CN=CorpMail/O=SCAL mail\004977 SCAL 黎元元 0 (GzvrXqMNR4JpUhEv+qUL) 1Z4AM CRUCN EKYMM YVWPD 5CEF9 51437 [email protected] 2 Person 1 2012-10-24 15:29:52 uid=004977/cn=users/DC=SCAL/DC=COM 0
黎再兴 CN=黎再兴/O=SCAL,黎再兴,008700,lizaixing CN=黎再兴/O=SCAL,黎再兴,008700,lizaixing CN=CorpMail/O=SCAL mail\008700 SCAL 黎再兴 0 (GxwYaqAx87GcC5+uyi3b) 1N2G1 8118A CJ7A2 7SQXB 5944Q E24B6 [email protected] 2 Person 1 2014-03-06 22:21:45 uid=008700/cn=users/DC=SCAL/DC=COM 0
黎再兴/scal CN=黎再兴/O=SCAL,黎再兴,008700,lizaixing CN=黎再兴/O=SCAL,黎再兴,008700,lizaixing CN=CorpMail/O=SCAL mail\008700 SCAL 黎再兴 0 (GxwYaqAx87GcC5+uyi3b) 1N2G1 8118A CJ7A2 7SQXB 5944Q E24B6 [email protected] 2 Person 1 2014-03-06 22:21:45 uid=008700/cn=users/DC=SCAL/DC=COM 0
黎军 CN=黎军/O=SCAL,黎军,004623,lijun5 CN=黎军/O=SCAL,黎军,004623,lijun5 CN=CorpMail/O=SCAL mail\004623 SCAL 黎军 0 (G+Si2CMtOymtND+JyZvu) 1TJUT H5Q1R HJZPQ GUF6V WXJQB 864FG [email protected] 2 Person 1 2012-10-24 15:19:26 uid=004623/cn=users/DC=SCAL/DC=COM 0
黎军/scal CN=黎军/O=SCAL,黎军,004623,lijun5 CN=黎军/O=SCAL,黎军,004623,lijun5 CN=CorpMail/O=SCAL mail\004623 SCAL 黎军 0 (G+Si2CMtOymtND+JyZvu) 1TJUT H5Q1R HJZPQ GUF6V WXJQB 864FG [email protected] 2 Person 1 2012-10-24 15:19:26 uid=004623/cn=users/DC=SCAL/DC=COM 0
黎啸晨 CN=黎啸晨/O=SCAL,黎啸晨,007951,qq123.. CN=黎啸晨/O=SCAL,黎啸晨,007951,qq123.. CN=CorpMail/O=SCAL mail\007951 SCAL 黎啸晨 0 (GZTPrwGSar0viKXTQ20b) 1HDWC XMT5Y YD3SG NKR83 Y692U 36487 [email protected] 2 Person 1 2012-10-24 16:49:44 uid=007951/cn=users/DC=SCAL/DC=COM 0
黎啸晨/scal CN=黎啸晨/O=SCAL,黎啸晨,007951,qq123.. CN=黎啸晨/O=SCAL,黎啸晨,007951,qq123.. CN=CorpMail/O=SCAL mail\007951 SCAL 黎啸晨 0 (GZTPrwGSar0viKXTQ20b) 1HDWC XMT5Y YD3SG NKR83 Y692U 36487 [email protected] 2 Person 1 2012-10-24 16:49:44 uid=007951/cn=users/DC=SCAL/DC=COM 0
黎奇 CN=黎奇/O=SCAL,黎奇,011186,liji CN=黎奇/O=SCAL,黎奇,011186,liji CN=CorpMail/O=SCAL mail\011186 黎奇 0 (Gm/O2Xzb7chPtmUVI9j0) 1RY3F 5CHXJ 8G9G3 R2FK6 GM15F C84DD [email protected] 2 Person 1 2014-04-16 02:20:21 uid=011186/cn=users/DC=SCAL/DC=COM 0
黎奇/scal CN=黎奇/O=SCAL,黎奇,011186,liji CN=黎奇/O=SCAL,黎奇,011186,liji CN=CorpMail/O=SCAL mail\011186 黎奇 0 (Gm/O2Xzb7chPtmUVI9j0) 1RY3F 5CHXJ 8G9G3 R2FK6 GM15F C84DD [email protected] 2 Person 1 2014-04-16 02:20:21 uid=011186/cn=users/DC=SCAL/DC=COM 0
黎娇 CN=黎娇/O=SCAL,黎娇,009951,lijiao2 CN=黎娇/O=SCAL,黎娇,009951,lijiao2 CN=CorpMail/O=SCAL mail\009951 SCAL 黎娇 0 (Gyn+pfXC+7GpjSUjRPxI) 13QUQ B1WA1 X95CW 8UFGK KXXTG S548A [email protected] 2 Person 1 2013-10-19 01:27:09 uid=009951/cn=users/DC=SCAL/DC=COM 0
黎娇/scal CN=黎娇/O=SCAL,黎娇,009951,lijiao2 CN=黎娇/O=SCAL,黎娇,009951,lijiao2 CN=CorpMail/O=SCAL mail\009951 SCAL 黎娇 0 (Gyn+pfXC+7GpjSUjRPxI) 13QUQ B1WA1 X95CW 8UFGK KXXTG S548A [email protected] 2 Person 1 2013-10-19 01:27:09 uid=009951/cn=users/DC=SCAL/DC=COM 0
黎娜 CN=黎娜/O=SCAL,黎娜,007139,lina1 CN=黎娜/O=SCAL,黎娜,007139,lina1 CN=CorpMail/O=SCAL mail\007139 SCAL 黎娜 0 (GTCVZafwYS/XIUUQeNnW) 1JTGR EUR8P NESY6 KJG2D 751VU 874DE [email protected] 2 Person 1 2012-10-24 16:27:36 uid=007139/cn=users/DC=SCAL/DC=COM 0
黎娜/scal CN=黎娜/O=SCAL,黎娜,007139,lina1 CN=黎娜/O=SCAL,黎娜,007139,lina1 CN=CorpMail/O=SCAL mail\007139 SCAL 黎娜 0 (GTCVZafwYS/XIUUQeNnW) 1JTGR EUR8P NESY6 KJG2D 751VU 874DE [email protected] 2 Person 1 2012-10-24 16:27:36 uid=007139/cn=users/DC=SCAL/DC=COM 0
黎子 CN=黎子郗/O=SCAL,黎子郗,011806,lizixi CN=黎子郗/O=SCAL,黎子郗,011806,lizixi CN=CorpMail/O=SCAL mail\011806 黎子 0 (GyhjBgw93C5FAQmWbmvW) 1FASH KEZJE 8YYDN A6KEU MZV39 9446B [email protected] 2 Person 1 2014-08-12 03:02:08 uid=011806/cn=users/DC=SCAL/DC=COM 0
黎子郗 CN=黎子郗/O=SCAL,黎子郗,011806,lizixi CN=黎子郗/O=SCAL,黎子郗,011806,lizixi CN=CorpMail/O=SCAL mail\011806 黎子 0 (GyhjBgw93C5FAQmWbmvW) 1FASH KEZJE 8YYDN A6KEU MZV39 9446B [email protected] 2 Person 1 2014-08-12 03:02:08 uid=011806/cn=users/DC=SCAL/DC=COM 0
黎子郗/scal CN=黎子郗/O=SCAL,黎子郗,011806,lizixi CN=黎子郗/O=SCAL,黎子郗,011806,lizixi CN=CorpMail/O=SCAL mail\011806 黎子 0 (GyhjBgw93C5FAQmWbmvW) 1FASH KEZJE 8YYDN A6KEU MZV39 9446B [email protected] 2 Person 1 2014-08-12 03:02:08 uid=011806/cn=users/DC=SCAL/DC=COM 0
黎德华 CN=黎德华/O=SCAL,黎德华,001407,lidehua CN=黎德华/O=SCAL,黎德华,001407,lidehua CN=CorpMail/O=SCAL mail\001407 SCAL 黎德华 0 (GmzmL3fxlwgIB1REu/78) 1E9MD A6Z1U 49BFV ECDNX X5P19 K54B5 [email protected] 2 Person 1 2012-10-24 14:03:27 uid=001407/cn=users/DC=SCAL/DC=COM 0
黎德华/scal CN=黎德华/O=SCAL,黎德华,001407,lidehua CN=黎德华/O=SCAL,黎德华,001407,lidehua CN=CorpMail/O=SCAL mail\001407 SCAL 黎德华 0 (GmzmL3fxlwgIB1REu/78) 1E9MD A6Z1U 49BFV ECDNX X5P19 K54B5 [email protected] 2 Person 1 2012-10-24 14:03:27 uid=001407/cn=users/DC=SCAL/DC=COM 0
黎明静 CN=黎明静/O=SCAL,黎明静,005271,limingjing CN=黎明静/O=SCAL,黎明静,005271,limingjing CN=CorpMail/O=SCAL mail\005271 SCAL 黎明静 0 (GmDGTZOcH5G6UGkIAhus) 17T8A 2ZGJ4 5CKUT 8N5GN HFP64 S64F4 [email protected] 2 Person 1 2012-10-24 15:38:04 uid=005271/cn=users/DC=SCAL/DC=COM 0
黎明静/scal CN=黎明静/O=SCAL,黎明静,005271,limingjing CN=黎明静/O=SCAL,黎明静,005271,limingjing CN=CorpMail/O=SCAL mail\005271 SCAL 黎明静 0 (GmDGTZOcH5G6UGkIAhus) 17T8A 2ZGJ4 5CKUT 8N5GN HFP64 S64F4 [email protected] 2 Person 1 2012-10-24 15:38:04 uid=005271/cn=users/DC=SCAL/DC=COM 0
黎杰 CN=黎杰/O=SCAL,黎杰,008124,lijie1 CN=黎杰/O=SCAL,黎杰,008124,lijie1 CN=CorpMail/O=SCAL mail\008124 SCAL 黎杰 0 (GCvOkisr3Knjmru/yG2x) 1R5P7 HXR5F 1EXDN DY2D7 WBDH7 J343F [email protected] 2 Person 1 2012-10-24 16:55:54 uid=008124/cn=users/DC=SCAL/DC=COM 0
黎杰/scal CN=黎杰/O=SCAL,黎杰,008124,lijie1 CN=黎杰/O=SCAL,黎杰,008124,lijie1 CN=CorpMail/O=SCAL mail\008124 SCAL 黎杰 0 (GCvOkisr3Knjmru/yG2x) 1R5P7 HXR5F 1EXDN DY2D7 WBDH7 J343F [email protected] 2 Person 1 2012-10-24 16:55:54 uid=008124/cn=users/DC=SCAL/DC=COM 0
黎杰文 CN=黎杰文/O=SCAL,黎杰文,008724,lijiewen CN=黎杰文/O=SCAL,黎杰文,008724,lijiewen CN=CorpMail/O=SCAL mail\008724 SCAL 黎杰文 0 (GOfZVNTeE6fmiuMXF0w7) 1AQK7 FW5UV TQA38 C1TK5 TQVVC W8439 [email protected] 2 Person 1 2012-10-24 17:15:22 uid=008724/cn=users/DC=SCAL/DC=COM 0
黎杰文/scal CN=黎杰文/O=SCAL,黎杰文,008724,lijiewen CN=黎杰文/O=SCAL,黎杰文,008724,lijiewen CN=CorpMail/O=SCAL mail\008724 SCAL 黎杰文 0 (GOfZVNTeE6fmiuMXF0w7) 1AQK7 FW5UV TQA38 C1TK5 TQVVC W8439 [email protected] 2 Person 1 2012-10-24 17:15:22 uid=008724/cn=users/DC=SCAL/DC=COM 0
黎清华 CN=黎清华/O=SCAL,黎清华,005113,liqinghua CN=黎清华/O=SCAL,黎清华,005113,liqinghua CN=CorpMail/O=SCAL mail\005113 SCAL 黎清华 0 (GsRUFzJYbfrRI4+HFLXK) 1N66Y B9KC1 MM9F6 TK499 EWMYN 544E4 [email protected] 2 Person 1 2012-10-24 15:33:42 uid=005113/cn=users/DC=SCAL/DC=COM 0
黎清华/scal CN=黎清华/O=SCAL,黎清华,005113,liqinghua CN=黎清华/O=SCAL,黎清华,005113,liqinghua CN=CorpMail/O=SCAL mail\005113 SCAL 黎清华 0 (GsRUFzJYbfrRI4+HFLXK) 1N66Y B9KC1 MM9F6 TK499 EWMYN 544E4 [email protected] 2 Person 1 2012-10-24 15:33:42 uid=005113/cn=users/DC=SCAL/DC=COM 0
黎燚 CN=黎燚/O=SCAL,黎燚,013929,liyi8 CN=黎燚/O=SCAL,黎燚,013929,liyi8 CN=CorpMail/O=SCAL mail\013929 黎燚 0 (GfaMukidWDwyRhCciKCU) 15Y6Y PAJNW XS859 QSP5S R1JRR 574BD [email protected] 2 Person 1 2016-03-20 23:20:44 uid=013929/cn=users/DC=SCAL/DC=COM 0
黎燚/scal CN=黎燚/O=SCAL,黎燚,013929,liyi8 CN=黎燚/O=SCAL,黎燚,013929,liyi8 CN=CorpMail/O=SCAL mail\013929 黎燚 0 (GfaMukidWDwyRhCciKCU) 15Y6Y PAJNW XS859 QSP5S R1JRR 574BD [email protected] 2 Person 1 2016-03-20 23:20:44 uid=013929/cn=users/DC=SCAL/DC=COM 0
黎玲 CN=黎玲玉/O=SCAL,黎玲玉,010995,lilingyu1 CN=黎玲玉/O=SCAL,黎玲玉,010995,lilingyu1 CN=CorpMail/O=SCAL mail\010995 SCAL 黎玲 0 (GdR7ncnJBE8f5131g/xQ) 1EX6A T3VV6 6DX1F NQS7S 5UGRB 724C4 [email protected] 2 Person 1 2014-03-06 22:21:51 uid=010995/cn=users/DC=SCAL/DC=COM 0
黎玲玉 CN=黎玲玉/O=SCAL,黎玲玉,010995,lilingyu1 CN=黎玲玉/O=SCAL,黎玲玉,010995,lilingyu1 CN=CorpMail/O=SCAL mail\010995 SCAL 黎玲 0 (GdR7ncnJBE8f5131g/xQ) 1EX6A T3VV6 6DX1F NQS7S 5UGRB 724C4 [email protected] 2 Person 1 2014-03-06 22:21:51 uid=010995/cn=users/DC=SCAL/DC=COM 0
黎玲玉/scal CN=黎玲玉/O=SCAL,黎玲玉,010995,lilingyu1 CN=黎玲玉/O=SCAL,黎玲玉,010995,lilingyu1 CN=CorpMail/O=SCAL mail\010995 SCAL 黎玲 0 (GdR7ncnJBE8f5131g/xQ) 1EX6A T3VV6 6DX1F NQS7S 5UGRB 724C4 [email protected] 2 Person 1 2014-03-06 22:21:51 uid=010995/cn=users/DC=SCAL/DC=COM 0


所以写个脚本抓取所有页面的这两个字段的数据,整理成为下面的格式

2.jpg


再使用john去破解所有密码

3.jpg


这里不跑10W多的员工数据了.

漏洞证明:

找到domino的服务器。看到验证码太弱了。可爆破

4.jpg


用PKAV的工具爆破:

6.jpg

如图配置。跑出密码

8.jpg


跑出几个帐号密码,其实跑出一个就够了。完全可以列所有密码了。
登陆地址:http://mail.scal.com.cn/names.nsf?Login
跑出7个账号。

zhangmin zhangjie   wangli   limin  wanglei   wangyan  密码为123456a    lijie  a123456


登陆进去后,可列出所有员工的密码信息,domino特性。
泄漏103077员工信息

1.jpg


可遍历所有员工 帐号,密码HASH,邮箱。
举个例子:

ame	ListName & FullName	FullName	ListName	Members	MailServer	MailFile	MailDomain	MailAddress	ShortName	Location	EncryptIncomingMail	CalendarDomain	NetUserName	HTTPPassword	CertThumbprint	InternetAddress	NewMailServer	NewMailFile	AltFullName	MessageStorage	ServerName	AltFullNameLanguage	$QuickPlace	SametimeServer	Type	MailSystem	$AdminpOldWebName	HTTPPasswordChangeDate	HTTPPasswordForceChange	Policy	LTPA_UsrNm	DB2UserName	Crypto Cap
黄静 CN=黄静/O=SCAL,黄静,005429,huangjing CN=黄静/O=SCAL,黄静,005429,huangjing CN=CorpMail/O=SCAL mail\005429 SCAL 黄静 0 (GVXMpJqCkgTHOAEI3j8r) 1JNHP 6PJAD 7B2HZ W917C Y5NW1 C44EF [email protected] 2 Person 1 2012-10-24 15:42:05 uid=005429/cn=users/DC=SCAL/DC=COM 0
黄静/scal CN=黄静/O=SCAL,黄静,005429,huangjing CN=黄静/O=SCAL,黄静,005429,huangjing CN=CorpMail/O=SCAL mail\005429 SCAL 黄静 0 (GVXMpJqCkgTHOAEI3j8r) 1JNHP 6PJAD 7B2HZ W917C Y5NW1 C44EF [email protected] 2 Person 1 2012-10-24 15:42:05 uid=005429/cn=users/DC=SCAL/DC=COM 0
黄韬 CN=黄韬/O=SCAL,黄韬,011893,huangtao CN=黄韬/O=SCAL,黄韬,011893,huangtao CN=CorpMail/O=SCAL mail\011893 黄韬 0 (Gk1YerdmUulhZ/gN1fID) 1G3S8 U3EGJ 3BPEF NUD7U XRFKV Q14E6 [email protected] 2 Person 1 2014-09-06 03:08:45 uid=011893/cn=users/DC=SCAL/DC=COM 0
黄韬/scal CN=黄韬/O=SCAL,黄韬,011893,huangtao CN=黄韬/O=SCAL,黄韬,011893,huangtao CN=CorpMail/O=SCAL mail\011893 黄韬 0 (Gk1YerdmUulhZ/gN1fID) 1G3S8 U3EGJ 3BPEF NUD7U XRFKV Q14E6 [email protected] 2 Person 1 2014-09-06 03:08:45 uid=011893/cn=users/DC=SCAL/DC=COM 0
黄韵 CN=黄韵/O=SCAL,黄韵,003920,huangyun CN=黄韵/O=SCAL,黄韵,003920,huangyun CN=CorpMail/O=SCAL mail\003920 SCAL 黄韵 0 (GtJeu1yrMMlAZRNcvyd8) 1S8UN FJ4RB EZBFJ TE26Y PGWRF G5417 [email protected] 2 Person 1 2012-10-24 15:00:24 uid=003920/cn=users/DC=SCAL/DC=COM 0
黄韵 CN=黄韵洁/O=SCAL,黄韵洁,012424,huangyunjie CN=黄韵洁/O=SCAL,黄韵洁,012424,huangyunjie CN=CorpMail/O=SCAL mail\012424 黄韵 0 (GV+dh4U3xEpi2JhoD9O1) 1JFC5 AMEZ1 QK53K HDK5V XENVF 83441 [email protected] 2 Person 1 2015-01-24 03:08:08 uid=012424/cn=users/DC=SCAL/DC=COM 0
黄韵/scal CN=黄韵/O=SCAL,黄韵,003920,huangyun CN=黄韵/O=SCAL,黄韵,003920,huangyun CN=CorpMail/O=SCAL mail\003920 SCAL 黄韵 0 (GtJeu1yrMMlAZRNcvyd8) 1S8UN FJ4RB EZBFJ TE26Y PGWRF G5417 [email protected] 2 Person 1 2012-10-24 15:00:24 uid=003920/cn=users/DC=SCAL/DC=COM 0
黄韵洁 CN=黄韵洁/O=SCAL,黄韵洁,012424,huangyunjie CN=黄韵洁/O=SCAL,黄韵洁,012424,huangyunjie CN=CorpMail/O=SCAL mail\012424 黄韵 0 (GV+dh4U3xEpi2JhoD9O1) 1JFC5 AMEZ1 QK53K HDK5V XENVF 83441 [email protected] 2 Person 1 2015-01-24 03:08:08 uid=012424/cn=users/DC=SCAL/DC=COM 0
黄韵洁/scal CN=黄韵洁/O=SCAL,黄韵洁,012424,huangyunjie CN=黄韵洁/O=SCAL,黄韵洁,012424,huangyunjie CN=CorpMail/O=SCAL mail\012424 黄韵 0 (GV+dh4U3xEpi2JhoD9O1) 1JFC5 AMEZ1 QK53K HDK5V XENVF 83441 [email protected] 2 Person 1 2015-01-24 03:08:08 uid=012424/cn=users/DC=SCAL/DC=COM 0
黄颖 CN=黄颖/O=SCAL,黄颖,001800,huangying CN=黄颖/O=SCAL,黄颖,001800,huangying CN=CorpMail/O=SCAL mail\001800 SCAL 黄颖 0 (G+ldWNAAVGlFrViLDph9) 1H3MM B15X9 ZGU1N JKZZR A44B7 K1461 [email protected] 2 Person 1 2013-08-31 03:46:09 uid=001800/cn=users/DC=SCAL/DC=COM 0
黄颖/scal CN=黄颖/O=SCAL,黄颖,001800,huangying CN=黄颖/O=SCAL,黄颖,001800,huangying CN=CorpMail/O=SCAL mail\001800 SCAL 黄颖 0 (G+ldWNAAVGlFrViLDph9) 1H3MM B15X9 ZGU1N JKZZR A44B7 K1461 [email protected] 2 Person 1 2013-08-31 03:46:09 uid=001800/cn=users/DC=SCAL/DC=COM 0
黄颖超 CN=黄颖超/O=SCAL,黄颖超,006228,huangyingchao CN=黄颖超/O=SCAL,黄颖超,006228,huangyingchao CN=CorpMail/O=SCAL mail\006228 SCAL 黄颖超 0 (GMLGfewPAxkpClB5pnwt) 1QQQ4 DE76C 77W66 5HF1N 51RDK V44A1 [email protected] 2 Person 1 2012-10-24 16:03:21 uid=006228/cn=users/DC=SCAL/DC=COM 0
黄颖超/scal CN=黄颖超/O=SCAL,黄颖超,006228,huangyingchao CN=黄颖超/O=SCAL,黄颖超,006228,huangyingchao CN=CorpMail/O=SCAL mail\006228 SCAL 黄颖超 0 (GMLGfewPAxkpClB5pnwt) 1QQQ4 DE76C 77W66 5HF1N 51RDK V44A1 [email protected] 2 Person 1 2012-10-24 16:03:21 uid=006228/cn=users/DC=SCAL/DC=COM 0
黄飞鹏 CN=黄飞鹏/O=SCAL,黄飞鹏,002369,huangfeipeng CN=黄飞鹏/O=SCAL,黄飞鹏,002369,huangfeipeng CN=CorpMail/O=SCAL mail\002369 SCAL 黄飞鹏 0 (GE10bhR1w1TLqB/swZcZ) 1U35D EQRQE N28GN GR4E5 CG7WK P64FE [email protected] 2 Person 1 2012-10-24 14:21:54 uid=002369/cn=users/DC=SCAL/DC=COM 0
黄飞鹏/scal CN=黄飞鹏/O=SCAL,黄飞鹏,002369,huangfeipeng CN=黄飞鹏/O=SCAL,黄飞鹏,002369,huangfeipeng CN=CorpMail/O=SCAL mail\002369 SCAL 黄飞鹏 0 (GE10bhR1w1TLqB/swZcZ) 1U35D EQRQE N28GN GR4E5 CG7WK P64FE [email protected] 2 Person 1 2012-10-24 14:21:54 uid=002369/cn=users/DC=SCAL/DC=COM 0
黄馨 CN=黄馨允/O=SCAL,黄馨允,009881,huangxinyun CN=黄馨允/O=SCAL,黄馨允,009881,huangxinyun CN=CorpMail/O=SCAL mail\009881 SCAL 黄馨 0 (GMZlFafHwlLZvaID3Jdi) 1VK5W JFBZX PKF6B 2N44U GS5X3 D54C3 [email protected] 2 Person 1 2013-01-23 01:53:42 uid=009881/cn=users/DC=SCAL/DC=COM 0
黄馨允 CN=黄馨允/O=SCAL,黄馨允,009881,huangxinyun CN=黄馨允/O=SCAL,黄馨允,009881,huangxinyun CN=CorpMail/O=SCAL mail\009881 SCAL 黄馨 0 (GMZlFafHwlLZvaID3Jdi) 1VK5W JFBZX PKF6B 2N44U GS5X3 D54C3 [email protected] 2 Person 1 2013-01-23 01:53:42 uid=009881/cn=users/DC=SCAL/DC=COM 0
黄馨允/scal CN=黄馨允/O=SCAL,黄馨允,009881,huangxinyun CN=黄馨允/O=SCAL,黄馨允,009881,huangxinyun CN=CorpMail/O=SCAL mail\009881 SCAL 黄馨 0 (GMZlFafHwlLZvaID3Jdi) 1VK5W JFBZX PKF6B 2N44U GS5X3 D54C3 [email protected] 2 Person 1 2013-01-23 01:53:42 uid=009881/cn=users/DC=SCAL/DC=COM 0
黄鹏 CN=黄鹏/O=SCAL,黄鹏,000688,huangpeng CN=黄鹏/O=SCAL,黄鹏,000688,huangpeng CN=CorpMail/O=SCAL mail\000688 SCAL 黄鹏 0 (GphxkDoOR3x5oboKxhjm) 1Z61W 4PWFS 1DV2E 1F469 ESK6Z K746A [email protected] 2 Person 1 2012-11-27 11:17:27 uid=000688/cn=users/DC=SCAL/DC=COM 0
黄鹏 CN=黄鹏诚/O=SCAL,黄鹏诚,009727,huangpengcheng CN=黄鹏诚/O=SCAL,黄鹏诚,009727,huangpengcheng CN=CorpMail/O=SCAL mail\009727 SCAL 黄鹏 0 (GWKE7lOnOaskCV2L96Hf) 13E3W G5RNM HBUH6 XDEET TDK6G G341F [email protected] 2 Person 1 2012-12-04 01:54:45 uid=009727/cn=users/DC=SCAL/DC=COM 0
黄鹏/scal CN=黄鹏/O=SCAL,黄鹏,000688,huangpeng CN=黄鹏/O=SCAL,黄鹏,000688,huangpeng CN=CorpMail/O=SCAL mail\000688 SCAL 黄鹏 0 (GphxkDoOR3x5oboKxhjm) 1Z61W 4PWFS 1DV2E 1F469 ESK6Z K746A [email protected] 2 Person 1 2012-11-27 11:17:27 uid=000688/cn=users/DC=SCAL/DC=COM 0
黄鹏翔 CN=黄鹏翔/O=SCAL,黄鹏翔,006253,huangpengxiang CN=黄鹏翔/O=SCAL,黄鹏翔,006253,huangpengxiang CN=CorpMail/O=SCAL mail\006253 SCAL 黄鹏翔 0 (G2NnHe2h90UsQA37ixW8) 1WRDE K9M9S H4ZBR 89F8M ZW6E4 6144E [email protected] 2 Person 1 2012-10-24 16:03:58 uid=006253/cn=users/DC=SCAL/DC=COM 0
黄鹏翔/scal CN=黄鹏翔/O=SCAL,黄鹏翔,006253,huangpengxiang CN=黄鹏翔/O=SCAL,黄鹏翔,006253,huangpengxiang CN=CorpMail/O=SCAL mail\006253 SCAL 黄鹏翔 0 (G2NnHe2h90UsQA37ixW8) 1WRDE K9M9S H4ZBR 89F8M ZW6E4 6144E [email protected] 2 Person 1 2012-10-24 16:03:58 uid=006253/cn=users/DC=SCAL/DC=COM 0
黄鹏诚 CN=黄鹏诚/O=SCAL,黄鹏诚,009727,huangpengcheng CN=黄鹏诚/O=SCAL,黄鹏诚,009727,huangpengcheng CN=CorpMail/O=SCAL mail\009727 SCAL 黄鹏 0 (GWKE7lOnOaskCV2L96Hf) 13E3W G5RNM HBUH6 XDEET TDK6G G341F [email protected] 2 Person 1 2012-12-04 01:54:45 uid=009727/cn=users/DC=SCAL/DC=COM 0
黄鹏诚/scal CN=黄鹏诚/O=SCAL,黄鹏诚,009727,huangpengcheng CN=黄鹏诚/O=SCAL,黄鹏诚,009727,huangpengcheng CN=CorpMail/O=SCAL mail\009727 SCAL 黄鹏 0 (GWKE7lOnOaskCV2L96Hf) 13E3W G5RNM HBUH6 XDEET TDK6G G341F [email protected] 2 Person 1 2012-12-04 01:54:45 uid=009727/cn=users/DC=SCAL/DC=COM 0
黄鹤 CN=黄鹤东/O=SCAL,黄鹤东,013270,huanghedong CN=黄鹤东/O=SCAL,黄鹤东,013270,huanghedong CN=CorpMail/O=SCAL mail\013270 黄鹤 0 (GnZ96jxMechhQ6+VAC0S) 159KY BH7SW YQXFC XTTWC DD4DX C64GA [email protected] 2 Person 1 2015-10-19 20:57:13 uid=013270/cn=users/DC=SCAL/DC=COM 0
黄鹤东 CN=黄鹤东/O=SCAL,黄鹤东,013270,huanghedong CN=黄鹤东/O=SCAL,黄鹤东,013270,huanghedong CN=CorpMail/O=SCAL mail\013270 黄鹤 0 (GnZ96jxMechhQ6+VAC0S) 159KY BH7SW YQXFC XTTWC DD4DX C64GA [email protected] 2 Person 1 2015-10-19 20:57:13 uid=013270/cn=users/DC=SCAL/DC=COM 0
黄鹤东/scal CN=黄鹤东/O=SCAL,黄鹤东,013270,huanghedong CN=黄鹤东/O=SCAL,黄鹤东,013270,huanghedong CN=CorpMail/O=SCAL mail\013270 黄鹤 0 (GnZ96jxMechhQ6+VAC0S) 159KY BH7SW YQXFC XTTWC DD4DX C64GA [email protected] 2 Person 1 2015-10-19 20:57:13 uid=013270/cn=users/DC=SCAL/DC=COM 0
黄龙 CN=黄龙/O=SCAL,黄龙,010627,huanglong CN=黄龙/O=SCAL,黄龙,010627,huanglong CN=CorpMail/O=SCAL mail\010627 SCAL 黄龙 0 (GerA1JK3FhE+3w82vl1V) 1J3AQ W762E XH2YJ TSAPZ B9A1C W34D8 [email protected] 2 Person 1 2013-10-19 01:49:21 uid=010627/cn=users/DC=SCAL/DC=COM 0
黄龙/scal CN=黄龙/O=SCAL,黄龙,010627,huanglong CN=黄龙/O=SCAL,黄龙,010627,huanglong CN=CorpMail/O=SCAL mail\010627 SCAL 黄龙 0 (GerA1JK3FhE+3w82vl1V) 1J3AQ W762E XH2YJ TSAPZ B9A1C W34D8 [email protected] 2 Person 1 2013-10-19 01:49:21 uid=010627/cn=users/DC=SCAL/DC=COM 0
黄龙翔 CN=黄龙翔/O=SCAL,黄龙翔,007955,huanglongxiang, CN=黄龙翔/O=SCAL,黄龙翔,007955,huanglongxiang, CN=CorpMail/O=SCAL mail\007955 SCAL 黄龙翔 0 (GEcYOm70LkAGytamD/hk) 19EG9 TUT3R 3BX2V QUCEU 5KNEX 68425 [email protected] 2 Person 1 2012-10-24 16:49:53 uid=007955/cn=users/DC=SCAL/DC=COM 0
黄龙翔/scal CN=黄龙翔/O=SCAL,黄龙翔,007955,huanglongxiang, CN=黄龙翔/O=SCAL,黄龙翔,007955,huanglongxiang, CN=CorpMail/O=SCAL mail\007955 SCAL 黄龙翔 0 (GEcYOm70LkAGytamD/hk) 19EG9 TUT3R 3BX2V QUCEU 5KNEX 68425 [email protected] 2 Person 1 2012-10-24 16:49:53 uid=007955/cn=users/DC=SCAL/DC=COM 0
黎元元 CN=黎元元/O=SCAL,黎元元,004977,liyuanyuan CN=黎元元/O=SCAL,黎元元,004977,liyuanyuan CN=CorpMail/O=SCAL mail\004977 SCAL 黎元元 0 (GzvrXqMNR4JpUhEv+qUL) 1Z4AM CRUCN EKYMM YVWPD 5CEF9 51437 [email protected] 2 Person 1 2012-10-24 15:29:52 uid=004977/cn=users/DC=SCAL/DC=COM 0
黎元元/scal CN=黎元元/O=SCAL,黎元元,004977,liyuanyuan CN=黎元元/O=SCAL,黎元元,004977,liyuanyuan CN=CorpMail/O=SCAL mail\004977 SCAL 黎元元 0 (GzvrXqMNR4JpUhEv+qUL) 1Z4AM CRUCN EKYMM YVWPD 5CEF9 51437 [email protected] 2 Person 1 2012-10-24 15:29:52 uid=004977/cn=users/DC=SCAL/DC=COM 0
黎再兴 CN=黎再兴/O=SCAL,黎再兴,008700,lizaixing CN=黎再兴/O=SCAL,黎再兴,008700,lizaixing CN=CorpMail/O=SCAL mail\008700 SCAL 黎再兴 0 (GxwYaqAx87GcC5+uyi3b) 1N2G1 8118A CJ7A2 7SQXB 5944Q E24B6 [email protected] 2 Person 1 2014-03-06 22:21:45 uid=008700/cn=users/DC=SCAL/DC=COM 0
黎再兴/scal CN=黎再兴/O=SCAL,黎再兴,008700,lizaixing CN=黎再兴/O=SCAL,黎再兴,008700,lizaixing CN=CorpMail/O=SCAL mail\008700 SCAL 黎再兴 0 (GxwYaqAx87GcC5+uyi3b) 1N2G1 8118A CJ7A2 7SQXB 5944Q E24B6 [email protected] 2 Person 1 2014-03-06 22:21:45 uid=008700/cn=users/DC=SCAL/DC=COM 0
黎军 CN=黎军/O=SCAL,黎军,004623,lijun5 CN=黎军/O=SCAL,黎军,004623,lijun5 CN=CorpMail/O=SCAL mail\004623 SCAL 黎军 0 (G+Si2CMtOymtND+JyZvu) 1TJUT H5Q1R HJZPQ GUF6V WXJQB 864FG [email protected] 2 Person 1 2012-10-24 15:19:26 uid=004623/cn=users/DC=SCAL/DC=COM 0
黎军/scal CN=黎军/O=SCAL,黎军,004623,lijun5 CN=黎军/O=SCAL,黎军,004623,lijun5 CN=CorpMail/O=SCAL mail\004623 SCAL 黎军 0 (G+Si2CMtOymtND+JyZvu) 1TJUT H5Q1R HJZPQ GUF6V WXJQB 864FG [email protected] 2 Person 1 2012-10-24 15:19:26 uid=004623/cn=users/DC=SCAL/DC=COM 0
黎啸晨 CN=黎啸晨/O=SCAL,黎啸晨,007951,qq123.. CN=黎啸晨/O=SCAL,黎啸晨,007951,qq123.. CN=CorpMail/O=SCAL mail\007951 SCAL 黎啸晨 0 (GZTPrwGSar0viKXTQ20b) 1HDWC XMT5Y YD3SG NKR83 Y692U 36487 [email protected] 2 Person 1 2012-10-24 16:49:44 uid=007951/cn=users/DC=SCAL/DC=COM 0
黎啸晨/scal CN=黎啸晨/O=SCAL,黎啸晨,007951,qq123.. CN=黎啸晨/O=SCAL,黎啸晨,007951,qq123.. CN=CorpMail/O=SCAL mail\007951 SCAL 黎啸晨 0 (GZTPrwGSar0viKXTQ20b) 1HDWC XMT5Y YD3SG NKR83 Y692U 36487 [email protected] 2 Person 1 2012-10-24 16:49:44 uid=007951/cn=users/DC=SCAL/DC=COM 0
黎奇 CN=黎奇/O=SCAL,黎奇,011186,liji CN=黎奇/O=SCAL,黎奇,011186,liji CN=CorpMail/O=SCAL mail\011186 黎奇 0 (Gm/O2Xzb7chPtmUVI9j0) 1RY3F 5CHXJ 8G9G3 R2FK6 GM15F C84DD [email protected] 2 Person 1 2014-04-16 02:20:21 uid=011186/cn=users/DC=SCAL/DC=COM 0
黎奇/scal CN=黎奇/O=SCAL,黎奇,011186,liji CN=黎奇/O=SCAL,黎奇,011186,liji CN=CorpMail/O=SCAL mail\011186 黎奇 0 (Gm/O2Xzb7chPtmUVI9j0) 1RY3F 5CHXJ 8G9G3 R2FK6 GM15F C84DD [email protected] 2 Person 1 2014-04-16 02:20:21 uid=011186/cn=users/DC=SCAL/DC=COM 0
黎娇 CN=黎娇/O=SCAL,黎娇,009951,lijiao2 CN=黎娇/O=SCAL,黎娇,009951,lijiao2 CN=CorpMail/O=SCAL mail\009951 SCAL 黎娇 0 (Gyn+pfXC+7GpjSUjRPxI) 13QUQ B1WA1 X95CW 8UFGK KXXTG S548A [email protected] 2 Person 1 2013-10-19 01:27:09 uid=009951/cn=users/DC=SCAL/DC=COM 0
黎娇/scal CN=黎娇/O=SCAL,黎娇,009951,lijiao2 CN=黎娇/O=SCAL,黎娇,009951,lijiao2 CN=CorpMail/O=SCAL mail\009951 SCAL 黎娇 0 (Gyn+pfXC+7GpjSUjRPxI) 13QUQ B1WA1 X95CW 8UFGK KXXTG S548A [email protected] 2 Person 1 2013-10-19 01:27:09 uid=009951/cn=users/DC=SCAL/DC=COM 0
黎娜 CN=黎娜/O=SCAL,黎娜,007139,lina1 CN=黎娜/O=SCAL,黎娜,007139,lina1 CN=CorpMail/O=SCAL mail\007139 SCAL 黎娜 0 (GTCVZafwYS/XIUUQeNnW) 1JTGR EUR8P NESY6 KJG2D 751VU 874DE [email protected] 2 Person 1 2012-10-24 16:27:36 uid=007139/cn=users/DC=SCAL/DC=COM 0
黎娜/scal CN=黎娜/O=SCAL,黎娜,007139,lina1 CN=黎娜/O=SCAL,黎娜,007139,lina1 CN=CorpMail/O=SCAL mail\007139 SCAL 黎娜 0 (GTCVZafwYS/XIUUQeNnW) 1JTGR EUR8P NESY6 KJG2D 751VU 874DE [email protected] 2 Person 1 2012-10-24 16:27:36 uid=007139/cn=users/DC=SCAL/DC=COM 0
黎子 CN=黎子郗/O=SCAL,黎子郗,011806,lizixi CN=黎子郗/O=SCAL,黎子郗,011806,lizixi CN=CorpMail/O=SCAL mail\011806 黎子 0 (GyhjBgw93C5FAQmWbmvW) 1FASH KEZJE 8YYDN A6KEU MZV39 9446B [email protected] 2 Person 1 2014-08-12 03:02:08 uid=011806/cn=users/DC=SCAL/DC=COM 0
黎子郗 CN=黎子郗/O=SCAL,黎子郗,011806,lizixi CN=黎子郗/O=SCAL,黎子郗,011806,lizixi CN=CorpMail/O=SCAL mail\011806 黎子 0 (GyhjBgw93C5FAQmWbmvW) 1FASH KEZJE 8YYDN A6KEU MZV39 9446B [email protected] 2 Person 1 2014-08-12 03:02:08 uid=011806/cn=users/DC=SCAL/DC=COM 0
黎子郗/scal CN=黎子郗/O=SCAL,黎子郗,011806,lizixi CN=黎子郗/O=SCAL,黎子郗,011806,lizixi CN=CorpMail/O=SCAL mail\011806 黎子 0 (GyhjBgw93C5FAQmWbmvW) 1FASH KEZJE 8YYDN A6KEU MZV39 9446B [email protected] 2 Person 1 2014-08-12 03:02:08 uid=011806/cn=users/DC=SCAL/DC=COM 0
黎德华 CN=黎德华/O=SCAL,黎德华,001407,lidehua CN=黎德华/O=SCAL,黎德华,001407,lidehua CN=CorpMail/O=SCAL mail\001407 SCAL 黎德华 0 (GmzmL3fxlwgIB1REu/78) 1E9MD A6Z1U 49BFV ECDNX X5P19 K54B5 [email protected] 2 Person 1 2012-10-24 14:03:27 uid=001407/cn=users/DC=SCAL/DC=COM 0
黎德华/scal CN=黎德华/O=SCAL,黎德华,001407,lidehua CN=黎德华/O=SCAL,黎德华,001407,lidehua CN=CorpMail/O=SCAL mail\001407 SCAL 黎德华 0 (GmzmL3fxlwgIB1REu/78) 1E9MD A6Z1U 49BFV ECDNX X5P19 K54B5 [email protected] 2 Person 1 2012-10-24 14:03:27 uid=001407/cn=users/DC=SCAL/DC=COM 0
黎明静 CN=黎明静/O=SCAL,黎明静,005271,limingjing CN=黎明静/O=SCAL,黎明静,005271,limingjing CN=CorpMail/O=SCAL mail\005271 SCAL 黎明静 0 (GmDGTZOcH5G6UGkIAhus) 17T8A 2ZGJ4 5CKUT 8N5GN HFP64 S64F4 [email protected] 2 Person 1 2012-10-24 15:38:04 uid=005271/cn=users/DC=SCAL/DC=COM 0
黎明静/scal CN=黎明静/O=SCAL,黎明静,005271,limingjing CN=黎明静/O=SCAL,黎明静,005271,limingjing CN=CorpMail/O=SCAL mail\005271 SCAL 黎明静 0 (GmDGTZOcH5G6UGkIAhus) 17T8A 2ZGJ4 5CKUT 8N5GN HFP64 S64F4 [email protected] 2 Person 1 2012-10-24 15:38:04 uid=005271/cn=users/DC=SCAL/DC=COM 0
黎杰 CN=黎杰/O=SCAL,黎杰,008124,lijie1 CN=黎杰/O=SCAL,黎杰,008124,lijie1 CN=CorpMail/O=SCAL mail\008124 SCAL 黎杰 0 (GCvOkisr3Knjmru/yG2x) 1R5P7 HXR5F 1EXDN DY2D7 WBDH7 J343F [email protected] 2 Person 1 2012-10-24 16:55:54 uid=008124/cn=users/DC=SCAL/DC=COM 0
黎杰/scal CN=黎杰/O=SCAL,黎杰,008124,lijie1 CN=黎杰/O=SCAL,黎杰,008124,lijie1 CN=CorpMail/O=SCAL mail\008124 SCAL 黎杰 0 (GCvOkisr3Knjmru/yG2x) 1R5P7 HXR5F 1EXDN DY2D7 WBDH7 J343F [email protected] 2 Person 1 2012-10-24 16:55:54 uid=008124/cn=users/DC=SCAL/DC=COM 0
黎杰文 CN=黎杰文/O=SCAL,黎杰文,008724,lijiewen CN=黎杰文/O=SCAL,黎杰文,008724,lijiewen CN=CorpMail/O=SCAL mail\008724 SCAL 黎杰文 0 (GOfZVNTeE6fmiuMXF0w7) 1AQK7 FW5UV TQA38 C1TK5 TQVVC W8439 [email protected] 2 Person 1 2012-10-24 17:15:22 uid=008724/cn=users/DC=SCAL/DC=COM 0
黎杰文/scal CN=黎杰文/O=SCAL,黎杰文,008724,lijiewen CN=黎杰文/O=SCAL,黎杰文,008724,lijiewen CN=CorpMail/O=SCAL mail\008724 SCAL 黎杰文 0 (GOfZVNTeE6fmiuMXF0w7) 1AQK7 FW5UV TQA38 C1TK5 TQVVC W8439 [email protected] 2 Person 1 2012-10-24 17:15:22 uid=008724/cn=users/DC=SCAL/DC=COM 0
黎清华 CN=黎清华/O=SCAL,黎清华,005113,liqinghua CN=黎清华/O=SCAL,黎清华,005113,liqinghua CN=CorpMail/O=SCAL mail\005113 SCAL 黎清华 0 (GsRUFzJYbfrRI4+HFLXK) 1N66Y B9KC1 MM9F6 TK499 EWMYN 544E4 [email protected] 2 Person 1 2012-10-24 15:33:42 uid=005113/cn=users/DC=SCAL/DC=COM 0
黎清华/scal CN=黎清华/O=SCAL,黎清华,005113,liqinghua CN=黎清华/O=SCAL,黎清华,005113,liqinghua CN=CorpMail/O=SCAL mail\005113 SCAL 黎清华 0 (GsRUFzJYbfrRI4+HFLXK) 1N66Y B9KC1 MM9F6 TK499 EWMYN 544E4 [email protected] 2 Person 1 2012-10-24 15:33:42 uid=005113/cn=users/DC=SCAL/DC=COM 0
黎燚 CN=黎燚/O=SCAL,黎燚,013929,liyi8 CN=黎燚/O=SCAL,黎燚,013929,liyi8 CN=CorpMail/O=SCAL mail\013929 黎燚 0 (GfaMukidWDwyRhCciKCU) 15Y6Y PAJNW XS859 QSP5S R1JRR 574BD [email protected] 2 Person 1 2016-03-20 23:20:44 uid=013929/cn=users/DC=SCAL/DC=COM 0
黎燚/scal CN=黎燚/O=SCAL,黎燚,013929,liyi8 CN=黎燚/O=SCAL,黎燚,013929,liyi8 CN=CorpMail/O=SCAL mail\013929 黎燚 0 (GfaMukidWDwyRhCciKCU) 15Y6Y PAJNW XS859 QSP5S R1JRR 574BD [email protected] 2 Person 1 2016-03-20 23:20:44 uid=013929/cn=users/DC=SCAL/DC=COM 0
黎玲 CN=黎玲玉/O=SCAL,黎玲玉,010995,lilingyu1 CN=黎玲玉/O=SCAL,黎玲玉,010995,lilingyu1 CN=CorpMail/O=SCAL mail\010995 SCAL 黎玲 0 (GdR7ncnJBE8f5131g/xQ) 1EX6A T3VV6 6DX1F NQS7S 5UGRB 724C4 [email protected] 2 Person 1 2014-03-06 22:21:51 uid=010995/cn=users/DC=SCAL/DC=COM 0
黎玲玉 CN=黎玲玉/O=SCAL,黎玲玉,010995,lilingyu1 CN=黎玲玉/O=SCAL,黎玲玉,010995,lilingyu1 CN=CorpMail/O=SCAL mail\010995 SCAL 黎玲 0 (GdR7ncnJBE8f5131g/xQ) 1EX6A T3VV6 6DX1F NQS7S 5UGRB 724C4 [email protected] 2 Person 1 2014-03-06 22:21:51 uid=010995/cn=users/DC=SCAL/DC=COM 0
黎玲玉/scal CN=黎玲玉/O=SCAL,黎玲玉,010995,lilingyu1 CN=黎玲玉/O=SCAL,黎玲玉,010995,lilingyu1 CN=CorpMail/O=SCAL mail\010995 SCAL 黎玲 0 (GdR7ncnJBE8f5131g/xQ) 1EX6A T3VV6 6DX1F NQS7S 5UGRB 724C4 [email protected] 2 Person 1 2014-03-06 22:21:51 uid=010995/cn=users/DC=SCAL/DC=COM 0


所以写个脚本抓取所有页面的这两个字段的数据,整理成为下面的格式

2.jpg


再使用john去破解所有密码

3.jpg


这里不跑10W多的员工数据了.

修复方案:

版权声明:转载请注明来源 艺术家@乌云


漏洞回应

厂商回应:

危害等级:高

漏洞Rank:10

确认时间:2016-04-11 11:12

厂商回复:

感谢漏洞作者艺术家提供的漏洞信息,我们将尽快处理。

最新状态:

暂无