17k旗下某站任意上传导致服务器沦陷

浏览： ℃

字体：大中小

发布时间：2013-12-12 14:50:54

来源：

17k旗下书香中国社区频道

http://125.39.193.136/

在用户头像处，只对前端做了限制，服务器端无限制，可直接抓包改包上传jsp shell

shell

http://125.39.193.136/userHeadImg/2013/12/06/cd.jsp

数据库

并且发现多个shell，好好排查一下吧

[/back/tomcat/bookchina/bookchina/userHeadImg/2013/12/06/]$ ifconfigeth0      Link encap:Ethernet  HWaddr 00:1E:4F:41:87:24            inet addr:172.16.0.14  Bcast:172.16.255.255  Mask:255.255.0.0          inet6 addr: fe80::21e:4fff:fe41:8724/64 Scope:Link          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1          RX packets:24337049 errors:0 dropped:0 overruns:0 frame:0          TX packets:15649176 errors:0 dropped:0 overruns:0 carrier:0          collisions:0 txqueuelen:1000           RX bytes:963289224 (918.6 MiB)  TX bytes:4139643882 (3.8 GiB)          Interrupt:169 Memory:f8000000-f8012100 eth0:0    Link encap:Ethernet  HWaddr 00:1E:4F:41:87:24            inet addr:192.168.0.14  Bcast:192.168.255.255  Mask:255.255.0.0          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1          Interrupt:169 Memory:f8000000-f8012100 eth1      Link encap:Ethernet  HWaddr 00:1E:4F:41:87:26            inet addr:125.39.193.136  Bcast:125.39.193.255  Mask:255.255.255.128          inet6 addr: fe80::21e:4fff:fe41:8726/64 Scope:Link          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1          RX packets:336955636 errors:0 dropped:0 overruns:0 frame:0          TX packets:212390571 errors:0 dropped:0 overruns:0 carrier:0          collisions:0 txqueuelen:1000           RX bytes:3388595933 (3.1 GiB)  TX bytes:673754461 (642.5 MiB)          Interrupt:169 Memory:f4000000-f4012100 eth1:1    Link encap:Ethernet  HWaddr 00:1E:4F:41:87:26            inet addr:125.39.193.139  Bcast:125.39.193.255  Mask:255.255.255.128          UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1          Interrupt:169 Memory:f4000000-f4012100 lo        Link encap:Local Loopback            inet addr:127.0.0.1  Mask:255.0.0.0          inet6 addr: ::1/128 Scope:Host          UP LOOPBACK RUNNING  MTU:16436  Metric:1          RX packets:565858749 errors:0 dropped:0 overruns:0 frame:0          TX packets:565858749 errors:0 dropped:0 overruns:0 carrier:0          collisions:0 txqueuelen:0           RX bytes:788476538 (751.9 MiB)  TX bytes:788476538 (751.9 MiB)

修复方案：

你懂得~

>更多相关文章