Joern In RealWorld (3) - 致远OA A8 SSRF2RCE
这篇文章的漏洞源于下面这篇文章,文章中提到该漏洞影响A8, A8+, A6等多个版本,下面我们尽可能的复现漏洞和探索Joern的可能性
致远OA是国内最有名的OA系统之一,这个OA封闭商业售卖再加上纷繁复杂的版本号加持下,致远OA拥有大量无法准确判断的版本。
这篇文章的漏洞源于下面这篇文章,文章中提到该漏洞影响A8, A8+, A6等多个版本,但很多版本我都找不到对应的源码,光A8就有一万个版本,下面我们尽可能的复现漏洞和探索Joern的可能性
Authors: Alex Murillo, Alan Ngo, Abe Schneider, Fae Carlisle Contributors: Nikki Benoit Executive Summary For years, threat actors have been using legitimate software for illegitimate or malicious purposes. One such software is NetSupport Manager – a remote control application used for remote systems management. In recent years, however, threat actors have repurposed this software as … Continued
The post NetSupport RAT: The RAT King Returns appeared first on VMware Security Blog.