A service of Ping An Insurance has a command execution controllable server.

A service of Ping An Insurance has a command execution controllable server.

RT

Weblogic exists in 202.69.27.42, and a command execution vulnerability exists in this version. As a result, poc made a simple shell (the magical discovery could only go through port 80)

After various tests ~ Okay... I finally got to the server (the Remote Desktop itself went out ).

Highlights:

In fact, I know some of the win7 flagship stable activation tools. If you need them, please ask me privately.

Some sensitive information is found.

 

In fact, these are not the focus. The focus is

 

 

We can see that both the database and the website are locally or locally accessible. Click until .. no further.