论坛 › web app渗透测试::『Web App penetration testing』 › 我是如何未授权登陆他人当当账号的

admin 发表于 2018-10-20 20:04:45

我是如何未授权登陆他人当当账号的

<meta http-equiv="Content-Type" content="text/html; charset=gb2312" />
<meta name="ProgId" content="Word.Document" />
<meta name="Generator" content="Microsoft Word 12" />
<meta name="Originator" content="Microsoft Word 12" />
<link rel="File-List" href="https://9kb.org/admin/3e3723bba532052ceeca04fd6faa9fbb.files/filelist.xml" />
<link rel="Edit-Time-Data" href="https://9kb.org/admin/3e3723bba532052ceeca04fd6faa9fbb.files/editdata.mso" />
<!-->
<style>
v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style>
<!--><!--><xml>
<o:documentproperties>
<o:author>SUNHAO</o:author>
<o:template>Normal</o:template>
<o:lastauthor>SYSTEM</o:lastauthor>
<o:revision>2</o:revision>
<o:totaltime>2</o:totaltime>
<o:created>2018-10-08T03:35:00Z</o:created>
<o:lastsaved>2018-10-08T03:35:00Z</o:lastsaved>
<o:pages>2</o:pages>
<o:words>102</o:words>
<o:characters>585</o:characters>
<o:lines>4</o:lines>
<o:paragraphs>1</o:paragraphs>
<o:characterswithspaces>686</o:characterswithspaces>
<o:version>12.00</o:version>
</o:documentproperties>
<o:officedocumentsettings>
<o:allowpng />
</o:officedocumentsettings>
</xml><!-->
<link rel="themeData" href="https://9kb.org/admin/3e3723bba532052ceeca04fd6faa9fbb.files/themedata.thmx" />
<link rel="colorSchemeMapping" href="https://9kb.org/admin/3e3723bba532052ceeca04fd6faa9fbb.files/colorschememapping.xml" />
<!--><xml>
<w:worddocument>
<w:trackmoves>false</w:trackmoves>
<w:trackformatting />
<w:punctuationkerning />
<w:drawinggridverticalspacing>7.8 磅</w:drawinggridverticalspacing>
<w:displayhorizontaldrawinggridevery>0</w:displayhorizontaldrawinggridevery>
<w:displayverticaldrawinggridevery>2</w:displayverticaldrawinggridevery>
<w:validateagainstschemas />
<w:saveifxmlinvalid>false</w:saveifxmlinvalid>
<w:ignoremixedcontent>false</w:ignoremixedcontent>
<w:alwaysshowplaceholdertext>false</w:alwaysshowplaceholdertext>
<w:donotpromoteqf />
<w:lidthemeother>EN-US</w:lidthemeother>
<w:lidthemeasian>ZH-CN</w:lidthemeasian>
<w:lidthemecomplexscript>X-NONE</w:lidthemecomplexscript>
<w:compatibility>
   <w:spaceforul />
   <w:balancesinglebytedoublebytewidth />
   <w:donotleavebackslashalone />
   <w:ultrailspace />
   <w:donotexpandshiftreturn />
   <w:adjustlineheightintable />
   <w:breakwrappedtables />
   <w:snaptogridincell />
   <w:wraptextwithpunct />
   <w:useasianbreakrules />
   <w:dontgrowautofit />
   <w:splitpgbreakandparamark />
   <w:dontvertaligncellwithsp />
   <w:dontbreakconstrainedforcedtables />
   <w:dontvertalignintxbx />
   <w:word11kerningpairs />
   <w:cachedcolbalance />
   <w:usefelayout />
</w:compatibility>
<m:mathpr>
   <m:mathfont m:val="Cambria Math" />
   <m:brkbin m:val="before" />
   <m:brkbinsub m:val="--" />
   <m:smallfrac />
   <m:dispdef />
   <m:lmargin m:val="0" />
   <m:rmargin m:val="0" />
   <m:defjc m:val="centerGroup" />
   <m:wrapindent m:val="1440" />
   <m:intlim m:val="subSup" />
   <m:narylim m:val="undOvr" />
</m:mathpr></w:worddocument>
</xml><!--><!--><xml>
<w:latentstyles deflockedstate="false" defunhidewhenused="true" defsemihidden="true" defqformat="false" defpriority="99" latentstylecount="267">
<w:lsdexception locked="false" priority="0" semihidden="false" unhidewhenused="false" qformat="true" name="Normal" />
<w:lsdexception locked="false" priority="9" semihidden="false" unhidewhenused="false" qformat="true" name="heading 1" />
<w:lsdexception locked="false" priority="9" qformat="true" name="heading 2" />
<w:lsdexception locked="false" priority="9" qformat="true" name="heading 3" />
<w:lsdexception locked="false" priority="9" qformat="true" name="heading 4" />
<w:lsdexception locked="false" priority="9" qformat="true" name="heading 5" />
<w:lsdexception locked="false" priority="9" qformat="true" name="heading 6" />
<w:lsdexception locked="false" priority="9" qformat="true" name="heading 7" />
<w:lsdexception locked="false" priority="9" qformat="true" name="heading 8" />
<w:lsdexception locked="false" priority="9" qformat="true" name="heading 9" />
<w:lsdexception locked="false" priority="39" name="toc 1" />
<w:lsdexception locked="false" priority="39" name="toc 2" />
<w:lsdexception locked="false" priority="39" name="toc 3" />
<w:lsdexception locked="false" priority="39" name="toc 4" />
<w:lsdexception locked="false" priority="39" name="toc 5" />
<w:lsdexception locked="false" priority="39" name="toc 6" />
<w:lsdexception locked="false" priority="39" name="toc 7" />
<w:lsdexception locked="false" priority="39" name="toc 8" />
<w:lsdexception locked="false" priority="39" name="toc 9" />
<w:lsdexception locked="false" priority="35" qformat="true" name="caption" />
<w:lsdexception locked="false" priority="10" semihidden="false" unhidewhenused="false" qformat="true" name="Title" />
<w:lsdexception locked="false" priority="1" name="Default Paragraph Font" />
<w:lsdexception locked="false" priority="11" semihidden="false" unhidewhenused="false" qformat="true" name="Subtitle" />
<w:lsdexception locked="false" priority="22" semihidden="false" unhidewhenused="false" qformat="true" name="Strong" />
<w:lsdexception locked="false" priority="20" semihidden="false" unhidewhenused="false" qformat="true" name="Emphasis" />
<w:lsdexception locked="false" priority="39" semihidden="false" unhidewhenused="false" name="Table Grid" />
<w:lsdexception locked="false" unhidewhenused="false" name="Placeholder Text" />
<w:lsdexception locked="false" priority="1" semihidden="false" unhidewhenused="false" qformat="true" name="No Spacing" />
<w:lsdexception locked="false" priority="60" semihidden="false" unhidewhenused="false" name="Light Shading" />
<w:lsdexception locked="false" priority="61" semihidden="false" unhidewhenused="false" name="Light List" />
<w:lsdexception locked="false" priority="62" semihidden="false" unhidewhenused="false" name="Light Grid" />
<w:lsdexception locked="false" priority="63" semihidden="false" unhidewhenused="false" name="Medium Shading 1" />
<w:lsdexception locked="false" priority="64" semihidden="false" unhidewhenused="false" name="Medium Shading 2" />
<w:lsdexception locked="false" priority="65" semihidden="false" unhidewhenused="false" name="Medium List 1" />
<w:lsdexception locked="false" priority="66" semihidden="false" unhidewhenused="false" name="Medium List 2" />
<w:lsdexception locked="false" priority="67" semihidden="false" unhidewhenused="false" name="Medium Grid 1" />
<w:lsdexception locked="false" priority="68" semihidden="false" unhidewhenused="false" name="Medium Grid 2" />
<w:lsdexception locked="false" priority="69" semihidden="false" unhidewhenused="false" name="Medium Grid 3" />
<w:lsdexception locked="false" priority="70" semihidden="false" unhidewhenused="false" name="Dark List" />
<w:lsdexception locked="false" priority="71" semihidden="false" unhidewhenused="false" name="Colorful Shading" />
<w:lsdexception locked="false" priority="72" semihidden="false" unhidewhenused="false" name="Colorful List" />
<w:lsdexception locked="false" priority="73" semihidden="false" unhidewhenused="false" name="Colorful Grid" />
<w:lsdexception locked="false" priority="60" semihidden="false" unhidewhenused="false" name="Light Shading Accent 1" />
<w:lsdexception locked="false" priority="61" semihidden="false" unhidewhenused="false" name="Light List Accent 1" />
<w:lsdexception locked="false" priority="62" semihidden="false" unhidewhenused="false" name="Light Grid Accent 1" />
<w:lsdexception locked="false" priority="63" semihidden="false" unhidewhenused="false" name="Medium Shading 1 Accent 1" />
<w:lsdexception locked="false" priority="64" semihidden="false" unhidewhenused="false" name="Medium Shading 2 Accent 1" />
<w:lsdexception locked="false" priority="65" semihidden="false" unhidewhenused="false" name="Medium List 1 Accent 1" />
<w:lsdexception locked="false" unhidewhenused="false" name="Revision" />
<w:lsdexception locked="false" priority="34" semihidden="false" unhidewhenused="false" qformat="true" name="List Paragraph" />
<w:lsdexception locked="false" priority="29" semihidden="false" unhidewhenused="false" qformat="true" name="Quote" />
<w:lsdexception locked="false" priority="30" semihidden="false" unhidewhenused="false" qformat="true" name="Intense Quote" />
<w:lsdexception locked="false" priority="66" semihidden="false" unhidewhenused="false" name="Medium List 2 Accent 1" />
<w:lsdexception locked="false" priority="67" semihidden="false" unhidewhenused="false" name="Medium Grid 1 Accent 1" />
<w:lsdexception locked="false" priority="68" semihidden="false" unhidewhenused="false" name="Medium Grid 2 Accent 1" />
<w:lsdexception locked="false" priority="69" semihidden="false" unhidewhenused="false" name="Medium Grid 3 Accent 1" />
<w:lsdexception locked="false" priority="70" semihidden="false" unhidewhenused="false" name="Dark List Accent 1" />
<w:lsdexception locked="false" priority="71" semihidden="false" unhidewhenused="false" name="Colorful Shading Accent 1" />
<w:lsdexception locked="false" priority="72" semihidden="false" unhidewhenused="false" name="Colorful List Accent 1" />
<w:lsdexception locked="false" priority="73" semihidden="false" unhidewhenused="false" name="Colorful Grid Accent 1" />
<w:lsdexception locked="false" priority="60" semihidden="false" unhidewhenused="false" name="Light Shading Accent 2" />
<w:lsdexception locked="false" priority="61" semihidden="false" unhidewhenused="false" name="Light List Accent 2" />
<w:lsdexception locked="false" priority="62" semihidden="false" unhidewhenused="false" name="Light Grid Accent 2" />
<w:lsdexception locked="false" priority="63" semihidden="false" unhidewhenused="false" name="Medium Shading 1 Accent 2" />
<w:lsdexception locked="false" priority="64" semihidden="false" unhidewhenused="false" name="Medium Shading 2 Accent 2" />
<w:lsdexception locked="false" priority="65" semihidden="false" unhidewhenused="false" name="Medium List 1 Accent 2" />
<w:lsdexception locked="false" priority="66" semihidden="false" unhidewhenused="false" name="Medium List 2 Accent 2" />
<w:lsdexception locked="false" priority="67" semihidden="false" unhidewhenused="false" name="Medium Grid 1 Accent 2" />
<w:lsdexception locked="false" priority="68" semihidden="false" unhidewhenused="false" name="Medium Grid 2 Accent 2" />
<w:lsdexception locked="false" priority="69" semihidden="false" unhidewhenused="false" name="Medium Grid 3 Accent 2" />
<w:lsdexception locked="false" priority="70" semihidden="false" unhidewhenused="false" name="Dark List Accent 2" />
<w:lsdexception locked="false" priority="71" semihidden="false" unhidewhenused="false" name="Colorful Shading Accent 2" />
<w:lsdexception locked="false" priority="72" semihidden="false" unhidewhenused="false" name="Colorful List Accent 2" />
<w:lsdexception locked="false" priority="73" semihidden="false" unhidewhenused="false" name="Colorful Grid Accent 2" />
<w:lsdexception locked="false" priority="60" semihidden="false" unhidewhenused="false" name="Light Shading Accent 3" />
<w:lsdexception locked="false" priority="61" semihidden="false" unhidewhenused="false" name="Light List Accent 3" />
<w:lsdexception locked="false" priority="62" semihidden="false" unhidewhenused="false" name="Light Grid Accent 3" />
<w:lsdexception locked="false" priority="63" semihidden="false" unhidewhenused="false" name="Medium Shading 1 Accent 3" />
<w:lsdexception locked="false" priority="64" semihidden="false" unhidewhenused="false" name="Medium Shading 2 Accent 3" />
<w:lsdexception locked="false" priority="65" semihidden="false" unhidewhenused="false" name="Medium List 1 Accent 3" />
<w:lsdexception locked="false" priority="66" semihidden="false" unhidewhenused="false" name="Medium List 2 Accent 3" />
<w:lsdexception locked="false" priority="67" semihidden="false" unhidewhenused="false" name="Medium Grid 1 Accent 3" />
<w:lsdexception locked="false" priority="68" semihidden="false" unhidewhenused="false" name="Medium Grid 2 Accent 3" />
<w:lsdexception locked="false" priority="69" semihidden="false" unhidewhenused="false" name="Medium Grid 3 Accent 3" />
<w:lsdexception locked="false" priority="70" semihidden="false" unhidewhenused="false" name="Dark List Accent 3" />
<w:lsdexception locked="false" priority="71" semihidden="false" unhidewhenused="false" name="Colorful Shading Accent 3" />
<w:lsdexception locked="false" priority="72" semihidden="false" unhidewhenused="false" name="Colorful List Accent 3" />
<w:lsdexception locked="false" priority="73" semihidden="false" unhidewhenused="false" name="Colorful Grid Accent 3" />
<w:lsdexception locked="false" priority="60" semihidden="false" unhidewhenused="false" name="Light Shading Accent 4" />
<w:lsdexception locked="false" priority="61" semihidden="false" unhidewhenused="false" name="Light List Accent 4" />
<w:lsdexception locked="false" priority="62" semihidden="false" unhidewhenused="false" name="Light Grid Accent 4" />
<w:lsdexception locked="false" priority="63" semihidden="false" unhidewhenused="false" name="Medium Shading 1 Accent 4" />
<w:lsdexception locked="false" priority="64" semihidden="false" unhidewhenused="false" name="Medium Shading 2 Accent 4" />
<w:lsdexception locked="false" priority="65" semihidden="false" unhidewhenused="false" name="Medium List 1 Accent 4" />
<w:lsdexception locked="false" priority="66" semihidden="false" unhidewhenused="false" name="Medium List 2 Accent 4" />
<w:lsdexception locked="false" priority="67" semihidden="false" unhidewhenused="false" name="Medium Grid 1 Accent 4" />
<w:lsdexception locked="false" priority="68" semihidden="false" unhidewhenused="false" name="Medium Grid 2 Accent 4" />
<w:lsdexception locked="false" priority="69" semihidden="false" unhidewhenused="false" name="Medium Grid 3 Accent 4" />
<w:lsdexception locked="false" priority="70" semihidden="false" unhidewhenused="false" name="Dark List Accent 4" />
<w:lsdexception locked="false" priority="71" semihidden="false" unhidewhenused="false" name="Colorful Shading Accent 4" />
<w:lsdexception locked="false" priority="72" semihidden="false" unhidewhenused="false" name="Colorful List Accent 4" />
<w:lsdexception locked="false" priority="73" semihidden="false" unhidewhenused="false" name="Colorful Grid Accent 4" />
<w:lsdexception locked="false" priority="60" semihidden="false" unhidewhenused="false" name="Light Shading Accent 5" />
<w:lsdexception locked="false" priority="61" semihidden="false" unhidewhenused="false" name="Light List Accent 5" />
<w:lsdexception locked="false" priority="62" semihidden="false" unhidewhenused="false" name="Light Grid Accent 5" />
<w:lsdexception locked="false" priority="63" semihidden="false" unhidewhenused="false" name="Medium Shading 1 Accent 5" />
<w:lsdexception locked="false" priority="64" semihidden="false" unhidewhenused="false" name="Medium Shading 2 Accent 5" />
<w:lsdexception locked="false" priority="65" semihidden="false" unhidewhenused="false" name="Medium List 1 Accent 5" />
<w:lsdexception locked="false" priority="66" semihidden="false" unhidewhenused="false" name="Medium List 2 Accent 5" />
<w:lsdexception locked="false" priority="67" semihidden="false" unhidewhenused="false" name="Medium Grid 1 Accent 5" />
<w:lsdexception locked="false" priority="68" semihidden="false" unhidewhenused="false" name="Medium Grid 2 Accent 5" />
<w:lsdexception locked="false" priority="69" semihidden="false" unhidewhenused="false" name="Medium Grid 3 Accent 5" />
<w:lsdexception locked="false" priority="70" semihidden="false" unhidewhenused="false" name="Dark List Accent 5" />
<w:lsdexception locked="false" priority="71" semihidden="false" unhidewhenused="false" name="Colorful Shading Accent 5" />
<w:lsdexception locked="false" priority="72" semihidden="false" unhidewhenused="false" name="Colorful List Accent 5" />
<w:lsdexception locked="false" priority="73" semihidden="false" unhidewhenused="false" name="Colorful Grid Accent 5" />
<w:lsdexception locked="false" priority="60" semihidden="false" unhidewhenused="false" name="Light Shading Accent 6" />
<w:lsdexception locked="false" priority="61" semihidden="false" unhidewhenused="false" name="Light List Accent 6" />
<w:lsdexception locked="false" priority="62" semihidden="false" unhidewhenused="false" name="Light Grid Accent 6" />
<w:lsdexception locked="false" priority="63" semihidden="false" unhidewhenused="false" name="Medium Shading 1 Accent 6" />
<w:lsdexception locked="false" priority="64" semihidden="false" unhidewhenused="false" name="Medium Shading 2 Accent 6" />
<w:lsdexception locked="false" priority="65" semihidden="false" unhidewhenused="false" name="Medium List 1 Accent 6" />
<w:lsdexception locked="false" priority="66" semihidden="false" unhidewhenused="false" name="Medium List 2 Accent 6" />
<w:lsdexception locked="false" priority="67" semihidden="false" unhidewhenused="false" name="Medium Grid 1 Accent 6" />
<w:lsdexception locked="false" priority="68" semihidden="false" unhidewhenused="false" name="Medium Grid 2 Accent 6" />
<w:lsdexception locked="false" priority="69" semihidden="false" unhidewhenused="false" name="Medium Grid 3 Accent 6" />
<w:lsdexception locked="false" priority="70" semihidden="false" unhidewhenused="false" name="Dark List Accent 6" />
<w:lsdexception locked="false" priority="71" semihidden="false" unhidewhenused="false" name="Colorful Shading Accent 6" />
<w:lsdexception locked="false" priority="72" semihidden="false" unhidewhenused="false" name="Colorful List Accent 6" />
<w:lsdexception locked="false" priority="73" semihidden="false" unhidewhenused="false" name="Colorful Grid Accent 6" />
<w:lsdexception locked="false" priority="19" semihidden="false" unhidewhenused="false" qformat="true" name="Subtle Emphasis" />
<w:lsdexception locked="false" priority="21" semihidden="false" unhidewhenused="false" qformat="true" name="Intense Emphasis" />
<w:lsdexception locked="false" priority="31" semihidden="false" unhidewhenused="false" qformat="true" name="Subtle Reference" />
<w:lsdexception locked="false" priority="32" semihidden="false" unhidewhenused="false" qformat="true" name="Intense Reference" />
<w:lsdexception locked="false" priority="33" semihidden="false" unhidewhenused="false" qformat="true" name="Book Title" />
<w:lsdexception locked="false" priority="37" name="Bibliography" />
<w:lsdexception locked="false" priority="39" qformat="true" name="TOC Heading" />
</w:latentstyles>
</xml><!-->
<style>
<!-- /* Font Definitions */ @font-face {font-family:宋体; panose-1:2 1 6 0 3 1 1 1 1 1; mso-font-alt:SimSun; mso-font-charset:134; mso-generic-font-family:auto; mso-font-pitch:variable; mso-font-signature:3 135135232 16 0 262145 0;} @font-face {font-family:"Cambria Math"; panose-1:2 4 5 3 5 4 6 3 2 4; mso-font-charset:0; mso-generic-font-family:roman; mso-font-pitch:variable; mso-font-signature:-1610611985 1107304683 0 0 159 0;} @font-face {font-family:等线; mso-font-alt:"Arial Unicode MS"; mso-font-charset:134; mso-generic-font-family:auto; mso-font-pitch:variable; mso-font-signature:0 953122042 22 0 262159 0;} @font-face {font-family:Verdana; panose-1:2 11 6 4 3 5 4 4 2 4; mso-font-charset:0; mso-generic-font-family:swiss; mso-font-pitch:variable; mso-font-signature:536871559 0 0 0 415 0;} @font-face {font-family:"\@宋体"; panose-1:2 1 6 0 3 1 1 1 1 1; mso-font-charset:134; mso-generic-font-family:auto; mso-font-pitch:variable; mso-font-signature:3 135135232 16 0 262145 0;} @font-face {font-family:"\@等线"; mso-font-charset:134; mso-generic-font-family:auto; mso-font-pitch:variable; mso-font-signature:0 953122042 22 0 262159 0;} /* Style Definitions */ p.MsoNormal, li.MsoNormal, div.MsoNormal {mso-style-unhide:no; mso-style-qformat:yes; mso-style-parent:""; margin:0cm; margin-bottom:.0001pt; text-align:justify; text-justify:inter-ideograph; mso-pagination:none; font-size:10.5pt; mso-bidi-font-size:11.0pt; font-family:等线; mso-ascii-font-family:等线; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:等线; mso-fareast-theme-font:minor-fareast; mso-hansi-font-family:等线; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:"Times New Roman"; mso-bidi-theme-font:minor-bidi; mso-font-kerning:1.0pt;} h3 {mso-style-priority:9; mso-style-unhide:no; mso-style-qformat:yes; mso-style-link:"标题 3 Char"; mso-margin-top-alt:auto; margin-right:0cm; mso-margin-bottom-alt:auto; margin-left:0cm; mso-pagination:widow-orphan; mso-outline-level:3; font-size:13.5pt; font-family:宋体; mso-bidi-font-family:宋体;} p.MsoHeader, li.MsoHeader, div.MsoHeader {mso-style-noshow:yes; mso-style-priority:99; mso-style-link:"页眉 Char"; margin:0cm; margin-bottom:.0001pt; text-align:center; mso-pagination:none; tab-stops:center 207.65pt right 415.3pt; layout-grid-mode:char; border:none; mso-border-bottom-alt:solid windowtext .75pt; padding:0cm; mso-padding-alt:0cm 0cm 1.0pt 0cm; font-size:9.0pt; font-family:等线; mso-ascii-font-family:等线; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:等线; mso-fareast-theme-font:minor-fareast; mso-hansi-font-family:等线; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:"Times New Roman"; mso-bidi-theme-font:minor-bidi; mso-font-kerning:1.0pt;} p.MsoFooter, li.MsoFooter, div.MsoFooter {mso-style-noshow:yes; mso-style-priority:99; mso-style-link:"页脚 Char"; margin:0cm; margin-bottom:.0001pt; mso-pagination:none; tab-stops:center 207.65pt right 415.3pt; layout-grid-mode:char; font-size:9.0pt; font-family:等线; mso-ascii-font-family:等线; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:等线; mso-fareast-theme-font:minor-fareast; mso-hansi-font-family:等线; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:"Times New Roman"; mso-bidi-theme-font:minor-bidi; mso-font-kerning:1.0pt;} p.MsoAcetate, li.MsoAcetate, div.MsoAcetate {mso-style-noshow:yes; mso-style-priority:99; mso-style-link:"批注框文本 Char"; margin:0cm; margin-bottom:.0001pt; text-align:justify; text-justify:inter-ideograph; mso-pagination:none; font-size:9.0pt; font-family:等线; mso-ascii-font-family:等线; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:等线; mso-fareast-theme-font:minor-fareast; mso-hansi-font-family:等线; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:"Times New Roman"; mso-bidi-theme-font:minor-bidi; mso-font-kerning:1.0pt;} span.Char {mso-style-name:"批注框文本 Char"; mso-style-noshow:yes; mso-style-priority:99; mso-style-unhide:no; mso-style-locked:yes; mso-style-link:批注框文本; mso-ansi-font-size:9.0pt; mso-bidi-font-size:9.0pt;} span.3Char {mso-style-name:"标题 3 Char"; mso-style-priority:9; mso-style-unhide:no; mso-style-locked:yes; mso-style-link:"标题 3"; mso-ansi-font-size:13.5pt; mso-bidi-font-size:13.5pt; font-family:宋体; mso-ascii-font-family:宋体; mso-fareast-font-family:宋体; mso-hansi-font-family:宋体; mso-bidi-font-family:宋体; mso-font-kerning:0pt; font-weight:bold;} p.detail, li.detail, div.detail {mso-style-name:detail; mso-style-unhide:no; mso-margin-top-alt:auto; margin-right:0cm; mso-margin-bottom-alt:auto; margin-left:0cm; mso-pagination:widow-orphan; font-size:12.0pt; font-family:宋体; mso-bidi-font-family:宋体;} span.Char0 {mso-style-name:"页眉 Char"; mso-style-noshow:yes; mso-style-priority:99; mso-style-unhide:no; mso-style-locked:yes; mso-style-link:页眉; mso-ansi-font-size:9.0pt; mso-bidi-font-size:9.0pt;} span.Char1 {mso-style-name:"页脚 Char"; mso-style-noshow:yes; mso-style-priority:99; mso-style-unhide:no; mso-style-locked:yes; mso-style-link:页脚; mso-ansi-font-size:9.0pt; mso-bidi-font-size:9.0pt;} .MsoChpDefault {mso-style-type:export-only; mso-default-props:yes; mso-bidi-font-family:"Times New Roman"; mso-bidi-theme-font:minor-bidi;} /* Page Definitions */ @page {mso-page-border-surround-header:no; mso-page-border-surround-footer:no; mso-footnote-separator:url("3e3723bba532052ceeca04fd6faa9fbb.files/header.html") fs; mso-footnote-continuation-separator:url("3e3723bba532052ceeca04fd6faa9fbb.files/header.html") fcs; mso-endnote-separator:url("3e3723bba532052ceeca04fd6faa9fbb.files/header.html") es; mso-endnote-continuation-separator:url("3e3723bba532052ceeca04fd6faa9fbb.files/header.html") ecs;} @page Section1 {size:595.3pt 841.9pt; margin:72.0pt 90.0pt 72.0pt 90.0pt; mso-header-margin:42.55pt; mso-footer-margin:49.6pt; mso-paper-source:0; layout-grid:15.6pt;} div.Section1 {page:Section1;} -->
</style>
<!-->
<style>
/* Style Definitions */
table.MsoNormalTable
        {mso-style-name:普通表格;
        mso-tstyle-rowband-size:0;
        mso-tstyle-colband-size:0;
        mso-style-noshow:yes;
        mso-style-priority:99;
        mso-style-qformat:yes;
        mso-style-parent:"";
        mso-padding-alt:0cm 5.4pt 0cm 5.4pt;
        mso-para-margin:0cm;
        mso-para-margin-bottom:.0001pt;
        mso-pagination:widow-orphan;
        font-size:10.5pt;
        mso-bidi-font-size:11.0pt;
        font-family:等线;
        mso-ascii-font-family:等线;
        mso-ascii-theme-font:minor-latin;
        mso-fareast-font-family:等线;
        mso-fareast-theme-font:minor-fareast;
        mso-hansi-font-family:等线;
        mso-hansi-theme-font:minor-latin;
        mso-font-kerning:1.0pt;}
</style>
<!--><!--><xml>
<o:shapedefaults v:ext="edit" spidmax="3074" />
</xml><!--><!--><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><!-->
<div class="Section1" style="layout-grid:15.6pt;">
        <p class="MsoNormal" align="left" style="text-align:left;line-height:18.75pt;mso-pagination:widow-orphan;word-break:break-all;">
                以iphone客户端app为例，在登陆的时候选择使用微博账号登陆<br />
我的登陆账号为no*****003<o:p></o:p>
        </p>
        <p class="MsoNormal" align="left" style="text-align:left;line-height:18.75pt;mso-pagination:widow-orphan;word-break:break-all;">
                <a href="http://bug.6kb.org/images/0117580174b04f1ce112c951d03ad6771deb5973.png" target="_blank"><!--><v:shapetype id="_x0000_t75" coordsize="21600,21600" o:spt="75" o:preferrelative="t" path="m@4@5l@4@11@9@11@9@5xe" filled="f" stroked="f">
<v:stroke joinstyle="miter" />
<v:formulas>
<v:f eqn="if lineDrawn pixelLineWidth 0" />
<v:f eqn="sum @0 1 0" />
<v:f eqn="sum 0 0 @1" />
<v:f eqn="prod @2 1 2" />
<v:f eqn="prod @3 21600 pixelWidth" />
<v:f eqn="prod @3 21600 pixelHeight" />
<v:f eqn="sum @0 0 1" />
<v:f eqn="prod @6 1 2" />
<v:f eqn="prod @7 21600 pixelWidth" />
<v:f eqn="sum @8 21600 0" />
<v:f eqn="prod @7 21600 pixelHeight" />
<v:f eqn="sum @10 21600 0" />
</v:formulas>
<v:path o:extrusionok="f" gradientshapeok="t" o:connecttype="rect" />
<o:lock v:ext="edit" aspectratio="t" />
</v:shapetype><v:shape id="图片_x0020_4" o:spid="_x0000_i1027" type="#_x0000_t75" alt="1.png" href="http://bug.6kb.org/images/0117580174b04f1ce112c951d03ad6771deb5973.png" target="&quot;_blank&quot;" style="width:450.75pt;height:799.5pt;visibility:visible;mso-wrap-style:square;" o:button="t">
<v:fill o:detectmouseclick="t" />
<v:imagedata src="https://9kb.org/admin/3e3723bba532052ceeca04fd6faa9fbb.files/image001.png" o:title="1" />
</v:shape><!--><!----><img border="0" width="601" height="1066" src="https://9kb.org/admin/3e3723bba532052ceeca04fd6faa9fbb.files/image002.jpg" alt="1.png" v:shapes="图片_x0020_4" /><!----></a><o:p></o:p>
        </p>
        <p class="MsoNormal" align="left" style="text-align:left;line-height:18.75pt;mso-pagination:widow-orphan;word-break:break-all;">
                <br />
点击登陆，然后截取https://api.weibo.com/oauth2/sso_authorize?client_id=2504490989&amp;access_token=2.00_i6lvBv1Vc_Gd787877bd3V4v2kD&amp;redirect_uri=http%3A%2F%2Fapi.snssdk.com%2Fauth%2Flogin_success%2F&amp;display=mobile&amp;response_type=token&amp;disable_sinaurl=1<br />
这个数据包，将返回的uid改为其他人的uid就可以登陆对应的账号了。<o:p></o:p>
        </p>
        <div style="mso-element:para-border-div;border:none;border-left:solid #999999 4.5pt;padding:0cm 0cm 0cm 0cm;">
                <p class="MsoNormal" align="left" style="margin-top:11.25pt;text-align:left;word-break:break-all;border:none;padding:0cm;">
                        漏洞证明：<o:p></o:p>
                </p>
        </div>
        <p class="MsoNormal" align="left" style="text-align:left;line-height:18.75pt;mso-pagination:widow-orphan;word-break:break-all;">
                我把uid修改为雪狼领导的，成功登陆雪狼领导账号。<o:p></o:p>
        </p>
        <p class="MsoNormal" align="left" style="text-align:left;line-height:18.75pt;mso-pagination:widow-orphan;word-break:break-all;">
                <a href="http://bug.6kb.org/images/011758555a308c8c802caf8988203b359c46be8e.jpg" target="_blank"><!--><v:shape id="图片_x0020_3" o:spid="_x0000_i1026" type="#_x0000_t75" alt="3.jpg" href="http://bug.6kb.org/images/011758555a308c8c802caf8988203b359c46be8e.jpg" target="&quot;_blank&quot;" style="width:449.25pt;height:93pt;visibility:visible;mso-wrap-style:square;" o:button="t">
<v:fill o:detectmouseclick="t" />
<v:imagedata src="https://9kb.org/admin/3e3723bba532052ceeca04fd6faa9fbb.files/image003.jpg" o:title="3" />
</v:shape><!--><!----><img border="0" width="599" height="124" src="https://9kb.org/admin/3e3723bba532052ceeca04fd6faa9fbb.files/image004.jpg" alt="3.jpg" v:shapes="图片_x0020_3" /><!----></a><o:p></o:p>
        </p>
        <p class="MsoNormal" align="left" style="text-align:left;line-height:18.75pt;mso-pagination:widow-orphan;word-break:break-all;">
                <o:p>&nbsp;</o:p>
        </p>
        <p class="MsoNormal" align="left" style="text-align:left;line-height:18.75pt;mso-pagination:widow-orphan;word-break:break-all;">
                <a href="http://bug.6kb.org/images/01175946c6116aa43adff6f5289fbb700aa75e1f.png" target="_blank"><!--><v:shape id="图片_x0020_2" o:spid="_x0000_i1025" type="#_x0000_t75" alt="2.png" href="http://bug.6kb.org/images/01175946c6116aa43adff6f5289fbb700aa75e1f.png" target="&quot;_blank&quot;" style="width:450.75pt;height:799.5pt;visibility:visible;mso-wrap-style:square;" o:button="t">
<v:fill o:detectmouseclick="t" />
<v:imagedata src="https://9kb.org/admin/3e3723bba532052ceeca04fd6faa9fbb.files/image005.png" o:title="2" />
</v:shape><!--><!----><img border="0" width="601" height="1066" src="https://9kb.org/admin/3e3723bba532052ceeca04fd6faa9fbb.files/image006.jpg" alt="2.png" v:shapes="图片_x0020_2" /><!----></a><o:p></o:p>
        </p>
        <p class="MsoNormal" align="left" style="text-align:left;line-height:18.75pt;mso-pagination:widow-orphan;word-break:break-all;">
                <o:p>&nbsp;</o:p>
        </p>
        <div style="mso-element:para-border-div;border:none;border-left:solid #999999 4.5pt;padding:0cm 0cm 0cm 0cm;">
                <p class="MsoNormal" align="left" style="margin-top:11.25pt;text-align:left;word-break:break-all;border:none;padding:0cm;">
                        修复方案：<o:p></o:p>
                </p>
        </div>
        <p class="MsoNormal" align="left" style="text-align:left;line-height:18.75pt;mso-pagination:widow-orphan;word-break:break-all;">
                正确校验uid与token的关系<o:p></o:p>
        </p>
        <p class="MsoNormal">
                <o:p>&nbsp;</o:p>
        </p>
</div>

查看完整版本: 我是如何未授权登陆他人当当账号的