ÎÄÕÂȪԴ£ºÏÈÖªÉçÇø£¨Å£°®»¨£©
ÔÎĵØÖ·£ºhttps://xz.aliyun.com/t/10442
0x01 ǰÑÔ
×î½ü¿´µ½Á˹ØÓÚÐí¶àºì¶Ó·½ÃæµÄÎÄÕ£¬£¬£¬£¬£¬£¬ÔõÑù¾ÙÐÐÐÅÏ¢ÍøÂ磬£¬£¬£¬£¬£¬´Ó¼òµ¥Ä¿µÄ»ò¶à¸öÄ¿µÄÖоÙÐпìËÙ²éÕÒÎó²î¡£¡£¡£¡£¡£¡£½ñÌìÌṩһÖÖÕë¶Ô½Ï¶à×ʲú»òÄ¿µÄµÄÇéÐÎϾÙÐÐÅúÁ¿Ê¶±ðÄ¿µÄ¿ò¼Ü¾ÙÐÐÕë¶ÔÐÔÎó²îÍÚ¾òµÄ·½·¨¡£¡£¡£¡£¡£¡£ÓõúÿÉÄÜÆäËü²½¶Ó»¹ÔÚÐÁÐÁÇÚ¿à´òµãµÄʱ¼ä£¬£¬£¬£¬£¬£¬ÄãÒѾ½øÄÚÍøÁË¡£¡£¡£¡£¡£¡£
0x02 ÕýÎÄ
×î½ü EHole ¸üÐÂÁË3.0°æ±¾£¬£¬£¬£¬£¬£¬ÌṩÁË finger Óë fofaext ²ÎÊý£¬£¬£¬£¬£¬£¬fofaext²ÎÊýÖ÷Òª´Ófofa¾ÙÐÐÅúÁ¿»ñÈ¡ IP µÄ¶Ë¿ÚÇéÐΣ¬£¬£¬£¬£¬£¬¶ø finger Ôò¾ÙÐÐÅúÁ¿¾ÙÐÐÖ¸ÎÆÑé֤ʶ±ð¡£¡£¡£¡£¡£¡£ÏÖÔÚ¿ªÔ´µÄÖ¸ÎÆ¿ìÒª1000Ìõ£¬£¬£¬£¬£¬£¬»ù±¾É϶¼ÊǽÏÁ¿³£Óöµ½µÄϵͳ£¬£¬£¬£¬£¬£¬ÁíÍâ finger ²ÎÊýÔò¿ÉÒÔÖ±½Óʶ±ðÏÂÃæÃûÌõĵØÖ·£º
IP:PORT
HTTP(s)://URL
HTTP(s)://IP
HTTP(s)://IP:PORT
ÔÚºì¶Ó³¡¾°ÏÂÊ×ÏȶԶà¸öÄ¿µÄ¾ÙÐÐÁË×ʲúÍøÂ磬£¬£¬£¬£¬£¬ÓÌÈçʱ¼¸Ç§ÉÏÍò¸öIP£¬£¬£¬£¬£¬£¬ÔõÑù¿ìËٵĴÓÕâЩ×ʲúÖоÙÐлñÈ¡Ö÷ÒªµÄϵͳ»òÕßÖ±½ÓÄÜ RCE µÄÏµÍ³ÄØ£¿£¿£¿£¿£¿£¿£¿
¿ÉÒÔÏÈ´Ófofa¾ÙÐÐÅúÁ¿ÌáÈ¡IP+PORT£º
./Ehole-darwin fofaext -l /Users/r1ng/Downloads/ip.txt

²âÊÔÁùÍò¸öIP´ÓFOFAÌáȡԼĪÐèÒª15-20·ÖÖÓ×óÓÒ¡£¡£¡£¡£¡£¡£ÌáÈ¡ºó»á×Ô¶¯ÌìÉú results.xlsx Îļþ¡£¡£¡£¡£¡£¡£

Ëæºó¿ÉÖ±½Ó½« host ÁÐ copy ÖÁ txt Îı¾ÖоÙÐÐʶ±ðÖ÷ÒªµÄϵͳ£¨×îÖÕ»ñÈ¡HTTP·þÎñ½«3ÍòÌõ£¬£¬£¬£¬£¬£¬Ê¶±ð10·ÖÖÓ×óÓÒ£©£º
PS£ºÖ¸ÎÆ¿É×Ô½ç˵Ìí¼Ó£¬£¬£¬£¬£¬£¬ÈçÊÖÀïÓÐij¸öϵͳµÄ 0day ¿ÉÖ¸¶¨Ìí¼ÓÖ¸ÎÆ¾ÙÐÐʶ±ð¡£¡£¡£¡£¡£¡£
./Ehole-darwin finger -l /Users/r1ng/Downloads/url.txt

×îÖÕÊä³öµÄЧ¹ûÈçÏ£º

ÖÖÖÖÖØµãϵͳ¿ÉÖ±½Ó¾ÙÐÐɸѡºó°´Ö¸¶¨Ä¿µÄ¾ÙÐй¥»÷»ñȡȨÏÞ£¬£¬£¬£¬£¬£¬ºÃ±Èshiro£º

ijOA£º

º£¿£¿£¿£¿£¿£¿£¿µÍþÊÓ rceµÈ£º

........
½ÓÏÂÀ´¾Í¿ÉÒÔ½øÈëÄÚÍøËæÒâʩչÁË~
0x03 ×ܽá
ÔÚºì¶Ó×÷Õ½ÖУ¬£¬£¬£¬£¬£¬ÐÅÏ¢ÍøÂçÊDZز»¿ÉÉٵĻ·½Ú¡£¡£¡£¡£¡£¡£EHole¿ÉÒÔ×ÊÖúºì¶ÓÖ°Ô±¿ìËÙ´ÓÍøÂçÖÐÒÔ¼°´ó×ÚÔÓÂÒµÄ×ʲúÖо«×¼¶¨Î»µ½Ò×±»¹¥»÷µÄϵͳºÍųÈõ×ʲú£¬£¬£¬£¬£¬£¬´Ó¶øÊµÑé½øÒ»²½¹¥»÷¡£¡£¡£¡£¡£¡£
EHoleÏîÄ¿µØÖ·£º
https://github.com/EdgeSecurityTeam/EHole
- Òªº¦´Ê±êÇ©£º
- 3377ÌåÓýÍø¹ÙÍøÈë¿Ú Íø°²¹¤¾ß ºì¶Ó¿ìËÙÅúÁ¿´òµã

¾©¹«Íø°²±¸ 11010802026257ºÅ