漏洞检测

{
  "success": true,
  "code": 200,
  "data": {
    "isVul": false,
    "product": "IIS",
    "vName": "IIS 短文件名枚举",
    "vType": "解析漏洞",
    "vId": [],
    "level": "中危",
    "vDesc": "Internet Information Services（IIS，互联网信息服务）是由微软公司提供的基于运行Microsoft Windows的互联网基本服务。Microsoft IIS在实现上存在文件枚举漏洞，攻击者可利用此漏洞枚举网络服务器根目录中的文件。危害：攻击者可以利用“~”字符猜解或遍历服务器中的文件名，或对IIS服务器中的.Net Framework进行拒绝服务攻击。黑客可通过该漏洞尝试获取网站服务器下存放文件的文件名，达到获取更多信息来入侵服务器的目的。",
    "link": "https://www.birdy02.com/2024/10/02/8a0d92a9-68ef-47cf-b556-0e893063dac3",
    "version": "",
    "note": "",
    "search": {
      "FOFA": "app=\"IIS\""
    },
    "fix": [
      "关闭NTFS 8.3文件格式的支持。该功能默认是开启的，对于大多数用户来说无需开启。",
      "将web文件夹的内容拷贝到另一个位置，比如D:\\www到D:\\www.back，然后删除原文件夹D:\\www，再重命名D:\\www.back到D:\\www。如果不重新复制，已经存在的短文件名则是不会消失的。"
    ],
    "request": {
      "url": "https://api.birdy02.com/ttt*~1*/a.aspx",
      "method": "GET",
      "header": {
        "Accept": "text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9",
        "Accept-Language": "zh-CN,zh;q=0.9",
        "Cache-Control": "no-cache",
        "Client-Ip": "101.252.67.142",
        "Connection": "keep-alive",
        "Cookie": "rememberMe=me",
        "Host": "api.birdy02.com",
        "Pragma": "no-cache",
        "Referer": "https://api.birdy02.com/ttt*~1*/a.aspx",
        "Upgrade-Insecure-Requests": "1",
        "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/126.0.0.0 Safari/537.36 Edg/126.0.0.0",
        "X-Forwarded-For": "101.252.67.142",
        "X-Originating-Ip": "101.252.67.142",
        "X-Remote-Addr": "101.252.67.142",
        "X-Remote-Ip": "101.252.67.142"
      },
      "body": ""
    },
    "response": {
      "code": 200,
      "url": "https://api.birdy02.com/ttt*~1*/a.aspx",
      "header": {
        "Access-Control-Allow-Credentials": "true",
        "Access-Control-Allow-Headers": "*",
        "Access-Control-Allow-Methods": "POST, GET, OPTIONS",
        "Access-Control-Allow-Origin": "*",
        "Access-Control-Max-Age": "86400",
        "Connection": "keep-alive",
        "Content-Length": "97",
        "Content-Type": "application/json; charset=utf-8",
        "Date": "Mon, 28 Oct 2024 03:35:37 GMT",
        "Samesite": "Secure",
        "Server": "openresty",
        "Set-Cookie": "session=b18c0500367b61ac7d660f1512d6a1e7; Path=/; Max-Age=3600",
        "Strict-Transport-Security": "max-age=31536000; includeSubDomains",
        "X-Cache": "MISS",
        "X-Content-Type-Options": "nosniff",
        "X-Dns-Prefetch-Control": "off",
        "X-Download-Options": "noopen",
        "X-Frame-Options": "DENY",
        "X-Permitted-Cross-Domain-Policies": "master-only",
        "X-Xss-Protection": "1;mode=block"
      },
      "body": "{\"success\":true,\"code\":403,\"data\":null,\"msg\":\"Unauthorized Access\",\"timer\":\"2024-10-28 11:35:37\"}",
      "time": "0"
    },
    "timer": "2024-10-28 11:35:37"
  },
  "msg": "Response Success",
  "timer": "2024-10-28 11:35:37"
}