锐捷uac

D

ruijie@2020

admin123

 web命令注入

122 root         0 SW<  [kdelayd]                   
   123 root         0 SW<  [kmpathd]                   
   124 root         0 SW<  [kmpath_handlerd]           
   125 root         0 SW   [kjournald]                 
   153 root      1840 S    syslogd -s 5000 -b 10
   155 root      1840 S    klogd        
   159 root         0 SW<  [i40e]       
   250 root      4572 S    /usr/local/sbin/sshd      
   251 root      1840 S    /sbin/getty -L 9600 ttyS0 vt100
   362 root         0 SW   [flush-8:16]              
   364 root         0 SW   [kjournald]         
   383 root      5600 S    /usr/local/lighttpd/sbin/lighttpd -f /usr/loca
 l/lighttpd/lighttpd.conf -m /usr/local/lighttpd/lib
   384 root     29848 S    /usr/local/php/bin/php-cgi
   385 root     29848 S    /usr/local/php/bin/php-cgi


   387 root     29848 S    /usr/local/php/bin/php-cgi  
   401 root     34220 S    /usr/local/php/bin/php-cgi  
   403 root     33896 S    /usr/local/php/bin/php-cgi  
   404 root     34864 S    /usr/local/php/bin/php-cgi  
   414 root      1888 S    /bin/sh /usr/local/mysql/bin/mysqld_safe --dat
 adir=/usr/local/mysql/data --pid-file=/var/run/mysql
   468 root      134m S    /usr/local/mysql/libexec/mysqld --basedir=/usr
 /local/mysql --datadir=/usr/local/mysql/data --user=
   489 root      3620 S    /usr/private/syscall           
   502 root      625m S    /usr/private/ace_userspace
   528 root      1840 S    /sbin/telnetd -p2323
   583 root      5684 S    /usr/private/l7-feature
   689 root      301m S <  /usr/private/l7-filter -f /usr/private/l7-filt
 er_rule.pat
   697 root      168m S <  /usr/private/mail-filter  
  733 root      3332 S    /usr/private/iptrack        
   741 root      3568 S    /usr/private/ip6track       
   751 root      1776 S    /usr/private/bypass         
   752 root      5168 S    /usr/private/adsingle_login 
   753 root     69896 S    /usr/private/access_rule
   777 root     66964 S    nginx: master process /usr/private/nginx
   779 root     67140 S    nginx: worker process
   780 root     49088 S    /usr/private/Scheduler    
   792 root     18684 S    /usr/local/squid_install/sbin/squid -f /usr/lo
 cal/squid_install/etc/squid.conf
   794 test      117m S    (squid-1) -f /usr/local/squid_install/etc/squi
 d.conf
   924 root      5948 S    /usr/private/ruijie-smp
   926 root      1696 S    /usr/private/ruijie-mcp-sso
  1034 root      5172 S    /usr/private/portald 

  1053 root      2760 S    /usr/private/ospfd          
  1069 root      2480 S    /usr/private/ripd -d        
  1381 root      6080 S    /usr/private/aceSerial      
  1428 root      2920 S    /usr/private/appmonitor     
  1483 root         0 Z    [ps2]
 11894 root     33212 S    /usr/local/php/bin/php-cgi              
 16620 root      4572 S    sshd: admin@pts/0    
 16667 root      4356 S    -sh
 16670 root      8016 S    /usr/private/ace_console
 16693 root         0 SW   [flush-8:0]
 18648 root      4572 S    sshd: admin@pts/1
 18725 root      4356 S    -sh
 18728 root      3272 S    /usr/private/ace_console
 18751 root      1888 S    sh -c ps  > /tmp/Ps_show.pat
 18752 root      1844 R    ps             

 25258 test     18452 S    /usr/local/apache2/bin/httpd
 25259 test     18452 S    /usr/local/apache2/bin/httpd
 25260 test     18452 S    /usr/local/apache2/bin/httpd
 25261 test     18452 S    /usr/local/apache2/bin/httpd
 25262 test     18452 S    /usr/local/apache2/bin/httpd

Welcome to 6000-E50 Administration Console
 ======================================================================

          [Main Menu]

          System Status
          Serial Number
          Version Information
          Work Mode
          Management IP Address
          System Update
          Download Debug information
          Add Route Table
          Reset Factory Default
          Save Configuration
          Reset WebUI Password & Management Policy
          Reboot
          Debug


  Username:          Password:
 ======================================================================

　　、debug密码是什么意思，这里不清楚，但是不是web密码