2010-05-21 │nginx文件类型错误解析漏洞+IIS源码泄露及文件类型解析错误

作者:逍遥乾坤 | 发表时间:2010-05-21 21:10:15 | 分类:网络随笔 | 阅读:10740 | 评论:4499
事情起因是今天在群里的一个朋友说当当网被黑了,我查看了一下貌似是t00ls的人集体“路过”的。
不过我大致的看了一下了解到时论坛的问题,跟主站没有任何关系,后来群里又有人说是nginx的事。
随后看到80sec公布了其nginx的漏洞,感觉这个漏洞的范围还是比较广的,而且利用方法较为简单,并且后果严重。
详细的信息我就不转载了,大家可以登录80sec查看:http://www.80sec.com/nginx-securit.html
我个人感觉,利用这个漏洞拿下的站应该都是大服务器,呵呵,反正应该是比较重要的,毕竟一般的不用nginx。
貌似现在也已经有牛人写出了扫描器了。只是暂时还没有几个人拿到呢。
漏洞的发现者是第一波测试,核心圈里第二波分享,我还算比较早的,估计也要是第三波了,虽然说出来没几个人知道,不过还是感觉自己out了。
今天80sec在半年都没有更新的情况下突然一天发布了两个漏洞,感觉挺吃惊的!
IIS源码泄露及文件类型解析错误,这个洞貌似以前就听说过,我看80sec上也没有过多的说明漏洞的形成原因和利用方法,感觉不太好,既然公布了,还是原创,就应该写的详细一些,否则有什么用呢?
网络一天比一天复杂,安全一天比一天严重!

评论

  • celebum:
  • mens under armour long sleeve real moncler moncler chou denim dress with white top ua clutchfit drive low negro oro argentina jersey 2018 messi for cheap
    celebum http://www.celebum.com/(2022-01-25 08:34:54)
  • evrimindustry:
  • womens ultra flex harmonious slip on sneaker sac 脿 main tendance printemps 2021 isotoner femme chaussons kelly hermes 25 cm bolsas de burberry maillot arbitre rugby ffr
    evrimindustry https://www.evrimindustry.com/(2022-01-22 02:48:42)
  • ufundogs:
  • herren sneaker 47 sac seau port茅 茅paule bottes hautes daim hermes teuerste tasche der welt bolso burberry bandolera kit calcio economici
    ufundogs https://www.ufundogs.com/(2022-01-22 02:48:41)
  • teknobam:
  • accessoires pour iphone collier surfeur pour homme lunette de soleil lacoste homme 2020 bolso chanel mas barato neue bundeswehr stiefel mouchoir poche costume
    teknobam https://www.teknobam.com/(2022-01-22 02:48:19)
  • lazfan:
  • louis vuitton ladies dresses red moncler coat kids house of cb sparkly dress michael kors 35h7gtvt2l the hundreds hats for eu stockx kobe 6 noir(2022-01-20 03:55:36)
  • ischool-bus:
  • basket valentino by mario valentino herm猫s handtasche carteras burberry para hombre maglioni misto lana uomo prada borsa grande coque iphone 8 plus apple cuir
    ischool-bus https://www.ischool-bus.com/(2022-01-15 01:56:58)
  • tgiinfo:
  • burberry mujer bolso maglietta marcelo burlon donna borsa galleria prada aliexpress coque iphone 12 pro max montre cluse femme 33mm lunette vtt descente
    tgiinfo https://www.tgiinfo.com/(2022-01-15 01:56:57)
  • jxjtncw:
  • borsa porta pc prada coque silicone magsafe iphone 12 collier lion monture cmu chanel cartera negra hanwag schuhe hallux
    jxjtncw https://www.jxjtncw.com/(2022-01-15 01:56:57)
  • curatorstl:
  • blue light glasses pretty little thing bolso tipo chanel tenis nike blancos de dama fc barcelona trikot 2020 family forever pandora coque en silicone iphone 12
    curatorstl https://www.curatorstl.com/(2022-01-09 13:23:31)
  • thmeylike:
  • carteras burberry hombre maglia juve 2018 2019 prada mini bag crossbody coque compatible iphone 8 montre femme originale et chic lunette de repo
    thmeylike https://www.thmeylike.com/(2022-01-08 17:38:57)
  • sixxtees:
  • amazon magliette personalizzate portacarte prada donna coque de telephone avec chaine collier pierre protectrice lunette fin bolso chanel negro acolchado
    sixxtees https://www.sixxtees.com/(2022-01-01 17:28:13)
  • curaakademiet:
  • chaussure de marche aigle homme durchsichtige hermes tasche cartera burberry original maglie larghe donne borse prada vintage usate coque avec cordon iphone 12
    curaakademiet https://www.curaakademiet.com/(2022-01-01 17:27:50)
  • reine-spa:
  • sac argent茅 lancaster pantoufles kickers hermes tasche transparent billetera burberry maglia calcio bianca borsa prada rosa cipria
    reine-spa https://www.reine-spa.com/(2021-12-30 04:50:55)
  • debagliano:
  • kit dream league soccer 2019 arsenal the north face diameter nike air jordan flight 45 trk negro air max 90 ultra 2.0 black air max 2016 hvit red
    debagliano http://www.debagliano.com/(2021-12-28 17:17:41)
  • desertaerie:
  • louis vuitton everyday crossbody diorcamp sunglasses black bandolera chanel converse violet fonc茅 salah trikot pandora rose geometric shapes open ring cz
    desertaerie https://www.desertaerie.com/(2021-12-28 13:00:54)
  • austinaame:
  • vernis leather louis vuitton prescription lab safety glasses billetera chanel mocassin homme timberland fc bayern aufw盲rmshirt pandora ball chain
    austinaame https://www.austinaame.com/(2021-12-28 13:00:53)
  • spurtwelt:
  • nike air pegasus 47 5 air max 95 97 98 blanc nike roshe run sort tiger camo for salg mens 2015 nike nfl seattle seahawks t shirts 86 air jordan 10 bianca rosso nero nike kobe 10 drill sergeant john
    spurtwelt http://www.spurtwelt.com/(2021-12-19 19:26:13)
  • thbogota:
  • scarpe ben e jerry chanel bolsa clasica air force 1 rose bleu em 2021 t shirt pandora aristocats charm charge sans fil iphone
    thbogota https://www.thbogota.com/(2021-11-20 06:09:19)
  • kokomocanoe:
  • leichte sommerm眉tze herren st raphael bracelet izipizi blue tortoise sunglasses bolso timeless chanel bottines femme yves saint laurent em trikot havertz
    kokomocanoe https://www.kokomocanoe.com/(2021-11-20 06:08:54)
  • paulbennison:
  • timbuktu authority rugzak apple phone pouzdro iphone 7 ivory wedding reception 拧aty bucket cappello floral upper thigh high boots the north face ultra mt ii gtx schuhe
    paulbennison http://www.paulbennison.net/(2021-11-07 23:23:58)
  • eligro:
  • i blason iphone 6s case victoria secret luggage zak pouzdro a screen protector for samsung galaxy s8 topshop button through midi 拧aty dallas cowboys salute to service 2018 cappello school sneakers
    eligro http://www.eligro.net/(2021-11-07 23:23:58)
  • ornyadams:
  • tommy hilfiger denim tote torba iphone 6s fancy covers betsey johnson taco handtas picture phone pouzdro iphone 6s charlotte russe 膷ern谩 floral 拧aty tampa smokers cappello
    ornyadams http://www.ornyadams.net/(2021-11-07 23:23:56)
  • midsland:
  • honor 10 phone hoesje limited nike camo youth rickey jackson jersey nfl 57 new orleans saints 2018 salute to service plain cotton torebki to decorate oppo a37f back cover john lewis gym zak incipio dualpro iphone 8 pouzdro
    midsland http://www.midsland.net/(2021-11-07 23:23:34)
  • czaterianie:
  • nike roshe one damen grau and white cute black and purple outfits kiara purple dress la rams dad hat for cheap onitsuka tiger mexico 66 hvit monaco blue black high top converse
    czaterianie http://www.czaterianie.com/(2021-11-06 18:09:08)

发表评论

  • 昵称:
  • 邮箱: (可选,保密)
  • 网址: (可选)
  • QQ: (可选,保密)
  • 内容:
  • 验证码: