😶 I'm a Devops Engineer
- email: [email protected]
😃企业内部网址导航系统,基于Python+Django+Vue开发,具有网址导航、网址管理、用户管理等功能
License: MIT License
😶 I'm a Devops Engineer
npm WARN deprecated [email protected]: this library is no longer supported
自定义排序 不然创建了就不能该顺序 不好对齐 或者调整顺序
图标库 是个很好的东西 可以集中管理重复使用
每个标签太大了 如果类目过多一个屏幕就放不下几个了
移动端布局错乱,是否有适配计划?
TEMPLATES = [
{
'BACKEND': 'django.template.backends.django.DjangoTemplates',
# 'DIRS': [os.path.join(BASE_DIR, 'templates')]
'DIRS': [os.path.join(BASE_DIR, 'websitefronted/dist')] #《《《《《《《《this
Vulnerability Product:WebsiteGuide v0.2
Vulnerability version: 0.2
Vulnerability type: Remote Command Execute
Vulnerability Details:
Vulnerability location: Image Upload
the variable "save_path" in /websiteapp/views.py -> IconViewSet.post method, does not check the name of file user upload ,
causes "../../" such path is available
and does not check binary of the image
causes user could upload image, pycode, html and stuff
Insecure image upload could cover the original code , causes Remote Command Execute
payload : https://github.com/Leeyangee/leeya_bug/blob/main/..1..1views.py
the payload is original code at /websiteapp/views.py but add a simple function os.system() to verify rce
(this is just a simple payload , It downloading index.html from http://www.bing.com , in order to verifying the vulnerability)
Firstly , Add a website in "分组管理"
After built , visit http://localhost:8000/admin/website
click navigator "网址管理", and click "替换图标"
and click "上传图标" choose the payload (or the image you wanna upload in normal situation)
finally click "确定" to upload
in the whole period of uploading , listening network
After upload the payload , you are able to observe the HTTP request that you just uploaded in burpsuite
Send it to the repeater and replace filename ..1..1views.py to ../../views.py
and finally , click Send , send the payload you had just modified
then you can find that the original code /websiteapp/views.py has changed from
to
that means you just changed the pycode and could causes RCE vulnerability
just visit the website page to trigger the api /api/icon, you can find the index.html downloaded from http://www.bing.com at the path /websiteapp/
proved RCE
by above method, you can upload your file to every file in website or cover every file in website
discovered by leeya_bug
👍
Module not found: Error: Can't resolve 'vue-axios' in '/WebsiteGuide/websitefronted/src
A declarative, efficient, and flexible JavaScript library for building user interfaces.
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
An Open Source Machine Learning Framework for Everyone
The Web framework for perfectionists with deadlines.
A PHP framework for web artisans
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
Some thing interesting about web. New door for the world.
A server is a program made to process requests and deliver data to clients.
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
Some thing interesting about visualization, use data art
Some thing interesting about game, make everyone happy.
We are working to build community through open source technology. NB: members must have two-factor auth.
Open source projects and samples from Microsoft.
Google ❤️ Open Source for everyone.
Alibaba Open Source for everyone
Data-Driven Documents codes.
China tencent open source team.