ËÝÔ´ÀûÆ÷GA»Æ½ð¼×NFT

°ä²¼¹¦·ò 2022-11-11

½ñ¶ù˫ʮһ

°²È«½çʲôÑùµÄ²úÆ·Äܹ»¡°¹ØÑÛÈ롱£¿

Äǵ±È»ÉÙ²»ÁËGA»Æ½ð¼×NFT


ƾʲôËü³ÉΪ¿Ú±®±¬Æ·

±¸ÊÜÐÅÈÎÇÒ¾­¾Ã²»Ë¥¡¢»Ø¹ºÎÞÊý£¿

ÒªÏë֪·ËüµÄ°ÂÃØ
Çëһ·¿´ÏÂÃæÕâ¸ö³¡¾°°¸Àý°É~


¾¯Áå´ó×÷ 


2022Äê7ÔµÄijһÌì £¬ó¬ó°Ãù £¬Íí·ç¾² £¬¹ú¶È¼¶¹¥·ÀÑÝÁ·ÕýÈç»ðÈçݱµØ½øÐÐ×Å¡£


¼à¿Ø´óÆÁÉÏ £¬¡°117.xx.xx.xxxÒÉËÆ´æÔÚWebshellÄÚ´æÂíͨѶÐÐΪ¡±µÄ¸æ¾¯ºöÈ»¸¡ÏÖ¡£Ò»Ïß°²·þ¹¤³ÌʦÓ×ΰ¾¯ÌèÆðÀ´ £¬Æ¾¾ÝÓë×ʲúÉÏWebshellͨѶµÄÈëÇÖÕßIP³ÖÐø¸ú½ø £¬·¢ÏÔìäÓë×ʲúWebÀûÓ÷þÎñÆ÷µÄ½»»¥Á÷Á¿ÖÐÓÓ×°dir¡±ºÅÁîÖ´ÐлØÏÔÁ˾Ö¡£Ó×ΰ¶Ù¸Ð´óʲ»Ãî £¬¸ù»ùÈ·ÈÏ×ʲúʧÏÝ £¬ÒªÇó´ëÖÃÏìÓ¦×éµ±¼´·â½ûÈκÎIPµØÖ·¶Ô¸Ã×ʲú/xxx/xx·ÓɵĽӼû £¬²¢´Ò´Òºô½Ðºó·½ÔöÔ®¡£


³õ²½ËÝÔ´


ÈëÇÖ×÷ΪµÄʵʱ·¢ÏÖÖ»Êǹ¥·ÀÆ¥µÐµÄÆðÍ· £¬¶ÔÈëÇÖ×÷ΪµÄʵʱ×è¶ÏÒ²²»ÊÇÆ¥µÐµÄÖյ㠣¬Ö»ÓжÔÈëÇÖ×÷ΪµÄÆëÈ«ËÝÔ´·ÖÎö²ÅÊÇÆ¥µÐÖзÀÊØ·½ÄÜÁ¦µÄÕÃÏÔ¡£


»°²»¶à˵ £¬ÂíÉÏ×ÅÊÖ£¡


ƾ¾ÝÓ×ΰÃèÊö £¬¸ÃʧÏÝ×ʲú117.xx.xx.xxxÔËÐÐ×ſͻ§OAϵͳ £¬ÏÖ³¡ËÝÔ´·ÖÎö×é·¢ÏÖOAµÄsysadminÕ˺Å19ʱ58·ÖµÇ¼IPÒì³£ £¬ÔÚÈ«Á÷Á¿·ÖÎöȡ֤ϵͳ£¨¼ò³ÆNFT£©ÖÐÏòǰ¼ìË÷¸ÃIPµÄÁ÷Á¿Ê± £¬ÕÒµ½ÁËÈëÇÖÕßÔÚ19ʱ50·Ö½«sysadminµÄÃÜÂëÅú¸ÄΪ¡°XXXXXXX¡±ºóµÇ¼ϵͳ¡£½ô½Ó×Å £¬Ó×ΰʹÓÃNFTÔÙÏòǰÅŲ鷢ÏÖÈëÇÖÕß¶ÔÖ¸±ê×ʲú½øÐÐÁËSQL×¢ÈëÈëÇÖ¡£


GA»Æ½ð¼×¡¤(ÖйúÇø)¹Ù·½ÍøÕ¾


µ«ÊÇ¿´Ê§ÏÝ×ʲú117.xx.xx.xxxÓйصÄÈëÇָ澯¾ùΪÈëÇÖʧ°Ü¶Îñ £¬Ó×Î°Ææ¹ÔìðÀ´ÁË £¬Ôõô¿ÉÄܶ¼ÊÇÈëÇÖʧ°Üµ«×ʲúȴʧÏÝÁËÄØ £¬Õ⼫´ó¿ÉÄÜÊÇ0day°¡£¡


´ø×ÅһϵÁÐÒÉÄÑ £¬Ó×ΰ´Ò´ÒÕÒµ½¶þÏßÖ§³ÖµÄ°²·þ¹¤³ÌʦÓ×׿ £¬¿´¿´Äܲ»ÄÜÀûÓÃNFT·¢ÏÖ¸ü¶àδ֪ÏßË÷¡£


ÅÙ¸ù¾¿µ×


0day·ì϶µÚÒ»µ¯£º Î´ÊÚȨ»ñÈ¡session key


´ÓÒ»ÏßÓ×ΰ·´À¡µÄSQL×¢Èë·ì϶ÀûÓÃÐÅÏ¢¿ÉÖª £¬¸ÃSQL×¢Èë½Ó¿ÚÊDZØÒªÈÏÖ¤µÄ¡£ÀûÓÃNFT»ØËÝ·¢ÏÖÈëÇÖpayloadÖи½ÓкϷ¨session key £¬ÕâÏÔÖøÓÐ㣳£Àí¡£¶þÏßÓ×׿·½±ãÓÃNFT³ÖÐøÏòǰËÝÔ´ £¬·¢ÏÖÔ­À´ÈëÇÖÕßÀûÓøÃϵͳµÄÒ»¸öÐÅϢй¶·ì϶»ñÈ¡ÁËsession key¡£


GA»Æ½ð¼×¡¤(ÖйúÇø)¹Ù·½ÍøÕ¾


ÈëÇÖÕßͨ¹ýGETÒªÇóURL¡°/xxxx/public."text-align: center;">GA»Æ½ð¼×¡¤(ÖйúÇø)¹Ù·½ÍøÕ¾


ÈëÇÖÕßÓÚ2022.7.28 21:02:45 Åú¸ÄsysadminÃÜÂë


GA»Æ½ð¼×¡¤(ÖйúÇø)¹Ù·½ÍøÕ¾


ÈëÇÖÕßÓÚͬÈÕ21:03·ÖÀûÓÃsysadminÕ˺ŵǼOAϵͳ


0day·ì϶µÚÈýµ¯£º ËÁÒâÎļþÉÏ´«·ì϶


¡°ÄܵǽÁË £¬ÔÙ½áºÏÒ»¸öÎļþÉÏ´«·ì϶²»¾ÍOKÁË£¿¡±¡°Ã»´í £¬ËùÒÔ½ÓÏÂÀ´µÄ³Áµã¾ÍÊÇÔÚsysadminÕ˺ŵǽºóµÄÁ÷Á¿ÀïÃæÕÒÕÒÓÐûÓÐÎļþÉÏ´«°É¡£¡±¡°À´ £¬¿ª¸É£¡¡±


ÔÚÓ×ΰºÍÓ×׿µÄͨÁ¦¹²Í¬Ï £¬×îÖÕͨ¹ýNFT¼ìË÷·¢ÏÖÈëÇÖÕß×îÔçÓÚ21£º05·Ö³¢ÊÔÉÏ´«Webshell £¬ºóÐø³¢ÊÔÈëÇÖÉÏ´«6´Î £¬ÆäÖÐ3´Î³É¹¦¡£


GA»Æ½ð¼×¡¤(ÖйúÇø)¹Ù·½ÍøÕ¾

GA»Æ½ð¼×¡¤(ÖйúÇø)¹Ù·½ÍøÕ¾


GA»Æ½ð¼×¡¤(ÖйúÇø)¹Ù·½ÍøÕ¾


GA»Æ½ð¼×¡¤(ÖйúÇø)¹Ù·½ÍøÕ¾


ÈëÇÖÕßÓÚµ±ÈÕ22:05·ÖÉÏ´«Ä§¸ÄµÄ±ùЫ·þÎñ¶Ë


GA»Æ½ð¼×¡¤(ÖйúÇø)¹Ù·½ÍøÕ¾



ÈëÇÖÕßÓÚµ±ÈÕ22:14·ÖÉÏ´«µÄoaGet."text-align: center;">GA»Æ½ð¼×¡¤(ÖйúÇø)¹Ù·½ÍøÕ¾

GA»Æ½ð¼×¡¤(ÖйúÇø)¹Ù·½ÍøÕ¾


µ±Íí22:17:58Ó×ÂíÖ´ÐкÅÁî³É¹¦


ÕæÏà±Ï¶


ÖÁ´Ë £¬ÕæÏà±Ï¶¡£ÈëÇÖÕß´ÓÐÅϢй¶Äõ½session key¡¢ÊÚȨsql×¢Èë²éÎÊÓû§ £¬¼Ì¶øÅú¸ÄÓû§sysadminÃÜÂëµÇ¼ £¬ÔÙµ½ÎļþÉÏ´«0dayÉÏ´«Ñ¹ËõÎļþ £¬×Ô½âѹµÃµ½Ä§¸ÄWebshell¼°ÄÚ´æÂí¡£Í¨¹ý3¸ö0day·ì϶µÄÒ»Á¬´®²Ù×÷ £¬×îÖÕ»ñµÃÁËϵͳȨÏÞ¡£


GA»Æ½ð¼×¡¤(ÖйúÇø)¹Ù·½ÍøÕ¾



ËùÓеÄÈëÇÖ×÷Ϊ¾¡ÊÕÔÚÈ«Á÷Á¿NFT²úÆ·ÊÓ½ÇÏ £¬ÕâҲΪȫÍþв·¢ÏÖºÍʵʱ´ëÖÃÏìÓ¦´òÏÂÁ˼áʵµÄ»ù´¡¡£


ºóÐø £¬Ó×׿ÁªÏµÇ°³¡¶ÔľÂí½øÐÐÁËËãÕʺÍȡ֤ £¬¸ø³öÏàÓ¦µÄϵͳ·ì϶½¨¸´½¨Ò顣ͬʱ £¬Ò²½«Õâ´ÎËÝÔ´¹ý³ÌÖз¢ÏÖµÄ0day·ì϶Éϱ¨¸øÁ˹ú¶ÈÓйز¿ÃÅ¡£


2.png

3.png

4.png


GA»Æ½ð¼×È«Á÷Á¿·ÖÎöȡ֤ϵͳ£¨NFT£©ÊÇ»ùÓÚÍøÂçÈ«Á÷Á¿´æ´¢µÄ¹¥»÷ȡ֤ËÝÔ´²úÆ· £¬¾ß±¸¹¥»÷ȡ֤ËÝÔ´¡¢Î´ÖªÍþвá÷ÁԺͼÓÃܹ¥»÷Á÷Á¿¼ì²âµÈ¶àÖÖ°²È«ÄÜÁ¦ £¬ÔÚÈ«Á÷Á¿´æ´¢µÄ»ù´¡ÉÏÌṩȫÁ¿Êý¾ÝµÄ¼±¾çȡ֤¼ìË÷ £¬½â¾öÍþвȡ֤ºÍËÝÔ´ÄÑÌâ¡£


NFT²úÆ·»¹ÄÚÖöàÖÖ·ÖÎöÄ£ÐÍ £¬Í¨¹ý»¹Ô­º¹ÇàÁ÷Á¿ÕæÊµ³¡¾° £¬ÊµÏÖ¾«×¼ÎÞÕùÒéµÄÒÑÖªºÍδ֪ÍþвµÄµ÷²éȡ֤ºÍËÝÔ´¹¤×÷ £¬ÓÐЧӦ¶Ô0dayµÈÒñ±ÎÐÔ½ÏÇ¿µÄÐÂÐÍÈëÇÖ £¬¼«´óµØÌá¸ßÓû§µÄÍøÂ簲ȫÔËӪЧÄÜ¡£Ä¿Ç° £¬¸Ã²úÆ·ÒÑÔÚµ±¾Ö¡¢¹«¼ì·¨¡¢ÔËÓªÉÌ¡¢½ðÈÚ¡¢µçÁ¦µÈ³ÁÒªÐÐÒµ²¿ÊðʹÓà £¬µÃµ½ÁËÓû§µÄ¸ß¶ÈÈÏ¿ÉÓëÇàíù¡£

GA»Æ½ð¼×¸ùÖ²ÓÚ×ÔÖ÷´´Ðµļ¼Êõ»ùÒò £¬½áºÏ·á˶ÉîºñµÄʵս¾­Ñé £¬²»Ðݸĸﰲȫ²úƷ״̬ £¬Éý¼¼ûÀÂú°²È«½â¾ö¹æ»® £¬¸³ÄÜÓû§ÔÚÊý×Ö¾­¼ÃʱÆÚ³ÉÁ¢ÍøÂç·ÀÓùϵͳ¡£×÷ÎªÍøÂ簲ȫÐÐÒµÁì¾üÆóÒµ £¬GA»Æ½ð¼×½«Îª¡°»¤º½Êý×ÖÖйú  Á캽ÐÅÏ¢°²È« ¡± ³ÖÐøÖÂÁ¦¡¢ÇÚ¸û²»ê¡¡£