Penetration testing - remember a practical experience of intranet penetration
Enterprise
2023-06-21 13:05:20
views: null
UFIDA GRP-U8 Arbitrary File Upload Vulnerability
1. The server 192.168.110.109 is detected through vulnerability scanning, and there is a UFIDA GRP-U8 arbitrary file upload vulnerability
2. Use burp to construct a vulnerability test file
3. The access to the test file is successful, and there is an arbitrary file upload vulnerability
4. Use the burp tool to build an attack packet, upload the webshell, and echo 200
5. Access the webshell through the ant sword connection tool to obtain the server system permission
Origin blog.csdn.net/qq_44484541/article/details/131081425