樹洞外鏈XSS&越權漏洞

From PwnWiki
Revision as of 12:57, 14 April 2021 by Pwnwiki (talk | contribs) (Created page with "==XSS== <pre> ><svg/onload=alert(6)> </pre> 上傳一張圖片,在創建文件名添加xss,公開是分享文件廣場。 ==越權漏洞== (需要條件,可以爆破...")
(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

XSS

><svg/onload=alert(6)>

上傳一張圖片,在創建文件名添加xss,公開是分享文件廣場。

越權漏洞

(需要條件,可以爆破。32位隨機字符)

需要key值。
c74bffaa1cd2a4eda30bd72fe5453bb0