The Tang Dynasty scanner is unauthorized to View Details of user Vulnerabilities

The Tang Dynasty scanner is unauthorized to View Details of user Vulnerabilities

Wang

I have a link in my hand.
 

http://www.tangscan.com/corp.php?action=detail&id=******&auth=a17a2************bb70e&uid=***&taskid=****&page=

You can access
 

OK. How can I change the id parameter in the link?
 

http://www.tangscan.com/corp.php?action=detail&id=*****&auth=a17a27a4**********70e&uid=***&taskid=****&page=

Er, is it piaca?
 

Change the id.
 

http://www.tangscan.com/corp.php?action=detail&id=*****&auth=a17a27a**********70e&uid=***&taskid=***&page=

 

 

Obviously, you only need to write a script to traverse the id to obtain the details of vulnerabilities of the entire site enterprise users ~


The danger is self-evident !!!