Unauthorized access to jmx-console of a project in Digital China (Getshell/Technical Document leakage/ftp data leakage/sensitive data of multiple project systems)

Unauthorized access to jmx-console of a project in Digital China (Getshell/Technical Document leakage/ftp data leakage/sensitive data of multiple project systems)

Rt

This system should be the CTAIS Project Development System of China's tax administration information system

Address: 202.108.145.35: 8888



For example:
 

 

Deployment process:
 

The shell address is http: // 202.108.145.35: 8888/is/index. jspx.

The system has installed the security software/is/index. jsp and cannot access this shell. From time to time, it will be okay to submit it several times in the second step of the deployment process during testing.


 

 

If there are multiple intranets, you will not go into depth.

OK. Here are some missing information:

Ftp information:


 

 

 

Technical documentation:
 

 

System Information:

Test and development environments, databases, patches, and backup data for many projects