HanDs
管理员

[7月漏洞公开] 雷柏邮件系统账户体系控制不严影响内部信息 



~~ 邮件都是一些设计啥的~~~

详细说明:

通过网上收集邮箱然后对这些邮箱进行爆破



根据雷柏的域名进行密码组合,尝试爆破一个出来,然后导出所有邮件进行爆破



code 区域
[+] Login successful: [email protected] rapoo123
[+] Mail: 267 emails
[+] Size: 188932750 bytes



[+] Login successful: [email protected] rapoo123
[+] Mail: 134 emails
[+] Size: 85127698 bytes


[+] Login successful: [email protected] rapoo123
[+] Mail: 37 emails
[+] Size: 29750767 bytes



[+] Login successful: [email protected] rapoo123
[+] Mail: 733 emails
[+] Size: 600423755 bytes



[+] Login successful: [email protected] rapoo123
[+] Mail: 511 emails
[+] Size: 498727641 bytes



[+] Login successful: [email protected] rapoo123
[+] Mail: 488 emails
[+] Size: 397979424 bytes





[+] Login successful: [email protected] [email protected]
[+] Mail: 48 emails
[+] Size: 40378205 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 350 emails
[+] Size: 222363758 bytes



[+] Login successful: [email protected] rapoo123
[+] Mail: 289 emails
[+] Size: 70203236 bytes



[+] Login successful: [email protected] rapoo123
[+] Mail: 794 emails
[+] Size: 588196424 bytes




[+] Login successful: [email protected] rapoo123
[+] Mail: 246 emails
[+] Size: 98432705 bytes





[+] Login successful: [email protected] [email protected]
[+] Mail: 10 emails
[+] Size: 7055830 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 76 emails
[+] Size: 29935852 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 79 emails
[+] Size: 29948721 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 81 emails
[+] Size: 41464504 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 35 emails
[+] Size: 29725610 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 41 emails
[+] Size: 29787410 bytes










[+] Login successful: [email protected] [email protected]
[+] Mail: 1 emails
[+] Size: 127383 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 19 emails
[+] Size: 6147858 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 143 emails
[+] Size: 128301349 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 118 emails
[+] Size: 36754090 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 136 emails
[+] Size: 52402746 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 139 emails
[+] Size: 48261209 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 98 emails
[+] Size: 80172004 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 48 emails
[+] Size: 26130977 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 2 emails
[+] Size: 308201 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 431 emails
[+] Size: 47494163 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 2847 emails
[+] Size: 305287243 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 3799 emails
[+] Size: 448304777 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 8 emails
[+] Size: 73553 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 3480 emails
[+] Size: 444559522 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 166 emails
[+] Size: 106076368 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 75 emails
[+] Size: 10975553 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 168 emails
[+] Size: 91670797 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 178 emails
[+] Size: 276582108 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 83 emails
[+] Size: 37495616 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 10 emails
[+] Size: 10086133 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 78 emails
[+] Size: 41104322 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 0 emails
[+] Size: 0 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 0 emails
[+] Size: 0 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 16 emails
[+] Size: 15748064 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 2 emails
[+] Size: 517091 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 56 emails
[+] Size: 8758004 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 118 emails
[+] Size: 58547854 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 66 emails
[+] Size: 24597138 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 24 emails
[+] Size: 553430 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 79 emails
[+] Size: 17130587 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 195 emails
[+] Size: 31462193 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 33 emails
[+] Size: 5110062 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 52 emails
[+] Size: 3466688 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 245 emails
[+] Size: 92743829 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 120 emails
[+] Size: 46735304 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 17 emails
[+] Size: 1227174 bytes



[+] Login successful: [email protected] [email protected]
[+] Mail: 1379 emails
[+] Size: 620621364 bytes



漏洞证明:

%X[}DN%1[)P8QZI8}U6({F0.png



~%@)~S@HYX8]I_VI%`6`6EX.png



4N_MWDP9U3N9ET_PWEIDDXJ.png



73F)`EMS2MT0Q4]}MFRZJSN.png



DSQ[{99CZC_){@@1V)JZQ7T.png



Y%1]}}%44CDSY)[RM%U([)2.png

修复方案:

加强密码设置~


学习中请遵守法律法规,本网站内容均来自于互联网,本网站不负担法律责任
雷柏 邮件系统 账户 体系 控制 影响 内部 信息
#1楼
发帖时间:2016-7-11   |   查看数:0   |   回复数:0
游客组
快速回复