记录黑客技术中优秀的内容, 传播黑客文化,分享黑客技术精华

格林豪泰某处设计缺陷导致大数据撞库后用户身份证/手机号/开房信息等泄漏,可消耗用户格林币升级会员

2016-02-22 19:10

http://998.com/Account/Sign这个地方登录位置,有验证码但是可绕过,用户名密码明文传输

1.png





2.png



测试可以撞库,大数据跑了跑,出来了很多,这里给出部分成功帐号证明:

code 区域
[email protected] 310715770

[email protected] jiguang26771

[email protected] byswdh741772

[email protected] 123098357774

[email protected] leilei19871130777

[email protected] 38239199777

[email protected] 4088333777

[email protected] 19901124778

[email protected] wen123778

[email protected] 515610778

[email protected] 43652375779

[email protected] 06dongjun14779

[email protected] dong123321780

[email protected] yangyuxin781

[email protected] 870530781

[email protected] 19830522781

[email protected] 129416781

[email protected] 123456781

[email protected] l04260029782

[email protected] 668868782

[email protected] 135020782

[email protected] hyq521782

[email protected] tonyray783

[email protected] 64258070783

[email protected] 13951982350783

[email protected] aaqqaa783

[email protected] 998877783

[email protected] 60696558784

[email protected] 987600784

[email protected] 123456784

[email protected] 987536785

[email protected] 861229785

[email protected] 8764806785

[email protected] 276951439785

[email protected] xiaochuan785

[email protected] 22006281785

[email protected] 435513785

[email protected] 11111111786

[email protected] 1992asz786

[email protected] 198165786

[email protected] 11259375786

[email protected] 871123786

[email protected] dalin520787

[email protected] 55169997787

[email protected] 520609787

[email protected] 1236548787

[email protected] 521827788

[email protected] 560623788

[email protected] 198808109789

[email protected] 911207789

[email protected] sh2000lq789

[email protected] liguang789

[email protected] 408925547789

[email protected] 68734693789

[email protected] 5128299790

[email protected] 123456792

[email protected] 5605570792

[email protected] 87704821792

[email protected] 5201314792

[email protected] 89892344792

[email protected] 8422925792

[email protected] 8422925792

[email protected] 15074720792

[email protected] 6860577792

[email protected] gaofeng792

[email protected] yangdong123792

[email protected] wy2311545792

[email protected] mimabaohua792

[email protected] 26197709793

[email protected] 9132898961793

[email protected] tiantian1325793

[email protected] 88382776794

[email protected] 19870405794

[email protected] 19820926794

[email protected] 1qaz2wsx794

[email protected] 498240794

[email protected] 88775150794

[email protected] jiandanai795

[email protected] 88811925795

[email protected] 19891123795

[email protected] wzl1988795

[email protected] 2262126795

[email protected] jiang6110285795

[email protected] wang59835795

[email protected] wzl1988795

[email protected] 520520795

[email protected] 3344521795

[email protected] 15944350846795

[email protected] 15944350846795

[email protected] qwert789795

[email protected] 49331211795

[email protected] 810912795

[email protected] 198477795

[email protected] 1qaz1q795

[email protected] 321654796

[email protected] woshitiancai797

[email protected] 6225065797

[email protected] devil86010797

[email protected] woshitiancai797

weiwu_my@qq.com12345zxcvb798

234744820@qq.com667292798

252579889@qq.com861130798

390615836@qq.com13245768798

411637660@qq.com66369386799

594812050@qq.com5201314aa799

231699923@qq.com783728799

782050523@qq.com120488799

bingya1111@qq.com123456789799

247229525@qq.com584520800

ynbnwlw@qq.com1231010800

huzhidso@qq.comyayaya800

616525992@qq.com904094800

liaoxianwei0105@qq.com13537446801

1287822@qq.comjijiji801

27061300@qq.com8887113801

56146207@qq.comwoaizhuzhu801

77803914@qq.com77803914801

724389764@qq.com839200801

18018459@qq.com828500801

20101512@qq.com841123801

294223594@qq.com140605801

450400962@qq.com8219525801

503183443@qq.com63781200801

344206979@qq.comwang123qi802

qiongyusg@qq.comwangyufeng802

397562024@qq.com397562024802

15470847@qq.com15470847802

407296362@qq.com407296362802

123384768@qq.comjaytaba802

287125267@qq.com8286889803

170202229@qq.com6912940803

570606721@qq.com2101117803

545490421@qq.com1990225803

1108168@qq.comjackal803

335455183@qq.com335455183803

475778036@qq.comwangwei915803

clarke777@qq.com5329580803

415127170@qq.com5626228803

297020523@qq.com963258963803

251577286@qq.com421988803

279625942@qq.com871206804

34891393@qq.com34891393804

417456623@qq.com520687804

405390649@qq.com1d0b7d9b804

chilitao@qq.com814117804

312358520@qq.com349478121805

375590859@qq.comxuan9826805

546622151@qq.com1360lhy805

269096787@qq.comhyk187192806

279749857@qq.comsfglkwfn806

swellwang@qq.com107331806

50366108@qq.com138919807

325015236@qq.com19871106807

lmisme@qq.comqunima808

415188219@qq.comguoshuai808

610049634@qq.comstefanie0723809

262945677@qq.com262945677810

274054532@qq.commengbd520810

276072197@qq.com8621068810

274054532@qq.commengbd520810

414033717@qq.com118511810

53411230@qq.com53411230811

349348702@qq.com511521811

584154721@qq.com198719811

349348702@qq.com511521811

sistian@qq.comss051212811

287332858@qq.com880317811

112649776@qq.com112649776812

424352380@qq.com233757812

27517421@qq.comwin256812

199734142@qq.comdayezi1y1812

14305654@qq.comwindows812

404282573@qq.com4994651813

404282573@qq.com4994651813

375245237@qq.comzclovett813

whatme321@qq.com887900813

18988582@qq.com198543813

lqsun@vip.qq.com1253000814

xiaoxi08@vip.qq.com800258816





登录之后可以查看用户的身份证,手机号,开房信息之类的,其他的不多说,这里说下身份证,这么重要的东西,已经打码了,但是。。。这里设计缺陷,你这打码和不打有啥区别。。。

3.png





5.png





6.png



还可以消耗用户格林币升级会员享受优惠~

7.png



还有就是这里出来的帐号,因为是998.com主站域,所以是通用的,还可以登录格林商城,又是一波信息泄漏~

漏洞证明:

code 区域
27530105@qq.com310715770

zbq27@qq.comjiguang26771

xielu456@qq.combyswdh741772

364979739@qq.com123098357774

121306971@qq.comleilei19871130777

271086338@qq.com38239199777

315211257@qq.com4088333777

tyqsteven@vip.qq.com19901124778

lcwen@qq.comwen123778

644024961@qq.com515610778

180898834@qq.com43652375779

462590833@qq.com06dongjun14779

330438886@qq.comdong123321780

19871230@qq.comyangyuxin781

6385383@qq.com870530781

andy.tm@qq.com19830522781

liyaya6@qq.com129416781

1234@qq.com123456781

258537347@qq.coml04260029782

593499321@qq.com668868782

4961964@qq.com135020782

huangyongqi@vip.qq.comhyq521782

raydi@qq.comtonyray783

349597272@qq.com64258070783

59789766@qq.com13951982350783

736050018@qq.comaaqqaa783

495678424@qq.com998877783

317985478@qq.com60696558784

119286621@qq.com987600784

123456@qq.com123456784

511350076@qq.com987536785

179499642@qq.com861229785

369067703@qq.com8764806785

yhlinjun@qq.com276951439785

382558343@qq.comxiaochuan785

22006281@qq.com22006281785

28956087@qq.com435513785

1111@qq.com11111111786

908890812@qq.com1992asz786

11946858@qq.com198165786

102350551@qq.com11259375786

602873805@qq.com871123786

50970750@qq.comdalin520787

bristal@qq.com55169997787

yyond@qq.com520609787

271306791@qq.com1236548787

584010975@qq.com521827788

ws614@qq.com560623788

496105751@qq.com198808109789

371731815@qq.com911207789

912898658@qq.comsh2000lq789

87175282@qq.comliguang789

wangshuhao721@qq.com408925547789

liulian2266@qq.com68734693789

342356561@qq.com5128299790

305493454@qq.com123456792

523883503@qq.com5605570792

248731250@qq.com87704821792

344178309@qq.com5201314792

517562558@qq.com89892344792

502409617@qq.com8422925792

502409617@qq.com8422925792

caso@vip.qq.com15074720792

249884876@qq.com6860577792

362888907@qq.comgaofeng792

339034762@qq.comyangdong123792

115127390@qq.comwy2311545792

380102667@qq.commimabaohua792

9085605@qq.com26197709793

iversoncl@qq.com9132898961793

wobushixiaogou@qq.comtiantian1325793

429428388@qq.com88382776794

326984450@qq.com19870405794

54981193@qq.com19820926794

epie@qq.com1qaz2wsx794

237511993@qq.com498240794

306966594@qq.com88775150794

296415580@qq.comjiandanai795

394149521@qq.com88811925795

469367739@qq.com19891123795

380871803@qq.comwzl1988795

349002735@qq.com2262126795

736880733@qq.comjiang6110285795

313235812@qq.comwang59835795

380871803@qq.comwzl1988795

138520116@qq.com520520795

373152581@qq.com3344521795

284725033@qq.com15944350846795

284725033@qq.com15944350846795

531841032@qq.comqwert789795

405791629@qq.com49331211795

158293711@qq.com810912795

452711077@qq.com198477795

334590777@qq.com1qaz1q795

3756642@qq.com321654796

zhangluchen@qq.comwoshitiancai797

95550029@qq.com6225065797

7982189@qq.comdevil86010797

zhangluchen@qq.comwoshitiancai797

weiwu_my@qq.com12345zxcvb798

234744820@qq.com667292798

252579889@qq.com861130798

390615836@qq.com13245768798

411637660@qq.com66369386799

594812050@qq.com5201314aa799

231699923@qq.com783728799

782050523@qq.com120488799

bingya1111@qq.com123456789799

247229525@qq.com584520800

ynbnwlw@qq.com1231010800

huzhidso@qq.comyayaya800

616525992@qq.com904094800

liaoxianwei0105@qq.com13537446801

1287822@qq.comjijiji801

27061300@qq.com8887113801

56146207@qq.comwoaizhuzhu801

77803914@qq.com77803914801

724389764@qq.com839200801

18018459@qq.com828500801

20101512@qq.com841123801

294223594@qq.com140605801

450400962@qq.com8219525801

503183443@qq.com63781200801

344206979@qq.comwang123qi802

qiongyusg@qq.comwangyufeng802

397562024@qq.com397562024802

15470847@qq.com15470847802

407296362@qq.com407296362802

123384768@qq.comjaytaba802

287125267@qq.com8286889803

170202229@qq.com6912940803

570606721@qq.com2101117803

545490421@qq.com1990225803

1108168@qq.comjackal803

335455183@qq.com335455183803

475778036@qq.comwangwei915803

clarke777@qq.com5329580803

415127170@qq.com5626228803

297020523@qq.com963258963803

251577286@qq.com421988803

279625942@qq.com871206804

34891393@qq.com34891393804

417456623@qq.com520687804

405390649@qq.com1d0b7d9b804

chilitao@qq.com814117804

312358520@qq.com349478121805

375590859@qq.comxuan9826805

546622151@qq.com1360lhy805

269096787@qq.comhyk187192806

279749857@qq.comsfglkwfn806

swellwang@qq.com107331806

50366108@qq.com138919807

325015236@qq.com19871106807

lmisme@qq.comqunima808

415188219@qq.comguoshuai808

610049634@qq.comstefanie0723809

262945677@qq.com262945677810

274054532@qq.commengbd520810

276072197@qq.com8621068810

274054532@qq.commengbd520810

414033717@qq.com118511810

53411230@qq.com53411230811

349348702@qq.com511521811

584154721@qq.com198719811

349348702@qq.com511521811

sistian@qq.comss051212811

287332858@qq.com880317811

112649776@qq.com112649776812

424352380@qq.com233757812

27517421@qq.comwin256812

199734142@qq.comdayezi1y1812

14305654@qq.comwindows812

404282573@qq.com4994651813

404282573@qq.com4994651813

375245237@qq.comzclovett813

whatme321@qq.com887900813

18988582@qq.com198543813

lqsun@vip.qq.com1253000814

xiaoxi08@vip.qq.com800258816

修复方案:

信息泄漏这么严重如果被人大数据撞库后发布到网上去。。。好好修一下验证码+打码吧

知识来源: www.wooyun.org/bugs/wooyun-2016-0168177

阅读:126222 | 评论:0 | 标签:无

想收藏或者和大家分享这篇好文章→复制链接地址

“格林豪泰某处设计缺陷导致大数据撞库后用户身份证/手机号/开房信息等泄漏,可消耗用户格林币升级会员”共有0条留言

发表评论

姓名:

邮箱:

网址:

验证码:

公告

关注公众号hackdig,学习最新黑客技术

推广

工具

标签云

本页关键词