论坛 › 工控物联网安全::『Internet of things security』 › 工控安全之某市华润燃气SCADA系统命令执行

admin 发表于 2022-3-31 03:18:12

工控安全之某市华润燃气SCADA系统命令执行

<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;word-break:break-all;">
        <span style="font-size:10.0pt;">工控安全之某市华润燃气<span lang="EN-US">SCADA</span>系统命令执行<span lang="EN-US">(GETSHELL</span>泄露大量信息<span lang="EN-US">/</span>控制大量设备<span lang="EN-US">)</span>。<span lang="EN-US"><br />
http://220.168.88.95:5902/cs/login.jsp<br />
http://220.168.88.95:5902/cs/user/loginCheck.action</span></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201603/24145037370534571eae1601c70861d002ff33ca.png" target="_blank"><img width="553" height="390" src="https://www.2k8.org/content/uploadfile/202203/31/61302ea3.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201603/2414504303804512f79c15392e1ca4105fd572fc.png" target="_blank"><img width="554" height="513" src="https://www.2k8.org/content/uploadfile/202203/31/095f0e84.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201603/2414504958ddecb2430d01e31009128ceb250b32.png" target="_blank"><img width="554" height="513" src="https://www.2k8.org/content/uploadfile/202203/31/3f9f8085.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <span lang="EN-US" style="font-size:10.0pt;">&nbsp;</span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <a href="https://w.hundan.org/articles/attach/201603/24145055e0e693808a24cce02ba7b0a42e87e7f5.png" target="_blank"><img width="554" height="450" src="https://www.2k8.org/content/uploadfile/202203/31/3d6c76d4.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;"></span>
</p>
<p style="font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;overflow-wrap:break-word;word-break:break-all;">
        <span lang="EN-US" style="font-size:10.0pt;">&nbsp;</span>
</p>
<div style="border:none;border-left:solid #999999 4.5pt;padding:0cm 0cm 0cm 0cm;">
        <h3 style="border:none;margin-bottom:0cm;margin-left:0cm;margin-right:0cm;margin-top:11.25pt;overflow-wrap:break-word;padding:0cm;text-indent:7.5pt;word-break:break-all;">
                <span style="font-size:10.5pt;font-weight:normal;">漏洞证明：<span lang="EN-US"></span></span>
        </h3>
</div>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <span style="color:black;font-size:10.0pt;">可内网</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">(GETSHELL</span><span style="color:black;font-size:10.0pt;">泄露大量信息</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">/</span><span style="color:black;font-size:10.0pt;">控制大量设备</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">)</span><span style="color:black;font-size:10.0pt;">。</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201603/24145119015ae512e0b1e718a93ff70a13a0a2c5.png" target="_blank"><img width="553" height="279" src="https://www.2k8.org/content/uploadfile/202203/31/1611fa98.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201603/241451286a4c74013fae940a8f7d6575cb497726.png" target="_blank"><img width="553" height="179" src="https://www.2k8.org/content/uploadfile/202203/31/def66e03.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201603/241451330edfab4e88c5ea533d038539067cbdfe.png" target="_blank"><img width="553" height="305" src="https://www.2k8.org/content/uploadfile/202203/31/d84f1af9.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201603/241451385485b36d93e5e9801e3a801e7592f699.png" target="_blank"><img width="554" height="333" src="https://www.2k8.org/content/uploadfile/202203/31/32ed8e33.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201603/24145142a1377b9ec4aa40318376311fdcacc614.png" target="_blank"><img width="554" height="275" src="https://www.2k8.org/content/uploadfile/202203/31/f73587e2.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <span lang="EN-US">&nbsp;</span>
</p>

查看完整版本: 工控安全之某市华润燃气SCADA系统命令执行