招聘网站的测试思路,网络安全爱好者中心-神域博客网

思路适用于大部分招聘网站，碰到了就是漏洞。

20240502152131148-图片

这里有限制，一个月只能申请5次

这里就存在漏洞点了既然它限制我一个月内只能投递5份那我突破他的那个限制，投递七八份甚至十几份那么这就存在漏洞了。

说干就干

在个人主页完善简历

20240502152540222-图片

在bp历史流量中发现有投递职业的限制。

来到主页面，点击社会招聘，选择不同职位收集其职位ID。

20240502152626288-图片

20240502152642379-图片

url参数中的positionId便是职位ID，建议收集10个不同岗位的职位ID。

职位ID字典如下：

20240502152725721-图片

利用并发漏洞投递简历

来到主页面，点击社会招聘，选择任意职位了解详情。

20240502152747774-图片

点击确定按钮，拦截提交简历的HTTP请求包。

20240502152817793-图片

将此请求包发送至Turbo intruder插件，加载相应positionId字典。

20240502152854951-图片

20240502152910214-图片

验收结果

此时再投递任一岗位，提示如下：你已申请22个职位，本月不能再申请！

20240502152936799-图片

20240502153003958-图片

------本文已结束，感谢您的阅读------

THE END

渗透测试
# #企业src

评论共12条

善语结善缘,恶语伤人心

提交

昵称

取消

昵称常用语夸夸

夸夸

表情图片

只看作者

- Norris Heathcote0
  Hello Neat post Theres an issue together with your site in internet explorer would check this IE still is the marketplace chief and a large element of other folks will leave out your magnificent writing due to this problem
  16小时前回复
- Clemmie Lakin0
  helloI like your writing very so much proportion we keep up a correspondence extra approximately your post on AOL I need an expert in this space to unravel my problem May be that is you Taking a look forward to see you
  19小时前回复
- Wilhelm Murray0
  Somebody essentially help to make significantly articles Id state This is the first time I frequented your web page and up to now I surprised with the research you made to make this actual post incredible Fantastic job
  7天前回复
- Adeline Dibbert0
  helloI like your writing very so much proportion we keep up a correspondence extra approximately your post on AOL I need an expert in this space to unravel my problem May be that is you Taking a look forward to see you
  7天前回复
- Bennie Cronin0
  Hi i think that i saw you visited my web site thus i came to Return the favore Im attempting to find things to enhance my siteI suppose its ok to use a few of your ideas
  7天前回复
- Humberto Bode0
  Hi Neat post Theres an issue together with your web site in internet explorer may test this IE still is the marketplace chief and a good component of people will pass over your fantastic writing due to this problem
  7天前回复
- Catherine Labadie0
  Nice blog here Also your site loads up fast What host are you using Can I get your affiliate link to your host I wish my web site loaded up as quickly as yours lol
  7天前回复
- Shakira Hand0
  Wonderful web site Lots of useful info here Im sending it to a few friends ans additionally sharing in delicious And obviously thanks to your effort
  8天前回复
- Terrence Schoen0
  Thanks I have recently been looking for info about this subject for a while and yours is the greatest I have discovered so far However what in regards to the bottom line Are you certain in regards to the supply
  9天前回复
- Walker Hahn0
  I was suggested this web site by my cousin Im not sure whether this post is written by him as no one else know such detailed about my trouble You are incredible Thanks
  10天前回复
- Verner Yost0
  Your blog is a treasure trove of knowledge! I'm constantly amazed by the depth of your insights and the clarity of your writing. Keep up the phenomenal work!
  10天前回复
- Zechariah Bode0
  you are in reality a just right webmaster The site loading velocity is incredible It seems that you are doing any unique trick In addition The contents are masterwork you have performed a wonderful task on this topic
  10天前回复