WooYun.org

接口、数据、fuzz技术 ，接口在测试中的重要性永远是第一位，我认为一名工程师发现在wooyun有漏洞被披露，只知道去修复漏洞，而不知道多想想其它地方是否存在同样的问题，这是极度危险的一件事。
对于长期以来盯守的攻击者，就会发散思维创造更大的安全性问题。当我发现移动端存在问题时，就想到pc客户端同样存在问题并且保留着这份测试报告，测试阿里安全工程师对于漏洞的处理修复态度，事实表明披露的漏洞以半小时成功修复却不愿意想想其它地方。
下面开始我们的检测过程，当我们打开客户端时，首先让我注意到的是登录帐号可以是“淘宝帐号或内部帐号”，这样的应用程序对于脚本小子的我们怎么去分析他的通信过程呢？

这里我们可以使用proxycap + burpsuite，成功的获得到程序的登录接口在这里我们确实发现该接口在输入几次错误密码时会有验证码的限制，但是却可以轻松的绕过，首次请求会对验证码进行验证，当验证码验证成功后才会对帐号密码进行验证，作为白帽子当然不甘于程序的既定流程绕过验证码判定，直接进行登录。

凭借几个月的检测过程，通过搜索引擎、社交网络、其它渠道、阿里本身的信息泄漏例如aliued、ux等搜集了大量的员工帐号信息，并且存在统一的初始化口令hello1234，下面来看看实际的检测情况（检测结果数据已清除），由此可以判断阿里巴巴至少具有1/3内部员工帐号使用初始口令

同样这样的接口也于上次一样，无限制的撞库！！上次每小时成功10万条帐号，可能速度太慢实际可利用分布式进行撞库，本次条件有限未进行分布式测试，继续利用C**N库进行测试下面看测试效果
zsg2828987@126.com 657966952
madanglu1111@sohu.com cf821220
xiaoshimu@163.com xiao7225
xiaonangod@vip.qq.com xiaonan920615
381569092@qq.com 19871018
249124144@QQ.com 510413iqop
314040495@qq.com 267413300
xyzwsb@sina.com shb240680
453019024@qq.com yirixiang
gw8952@tom.com 89522222
471623470@qq.com 123a123a
632681464@qq.com cao123jingwei
giftoflife@live.cn butterfly
hotmailjiang@hotmail.com jiangpath
stream@126.com 1qazcde3
wjgun@163.com 85805361
wjtwuji@163.com wjt5560796
pingkwok@sina.com 19810903
zero_zhz@sina.com 19791030
tallmanx@163.com guoqian11
393898303@qq.com 8606190315
xuhaidong117@163.com xuhaidong117ok
zhangr67@sina.com 19870607
shamo0728@163.com 19810728
yuanyinyu1987@126.com fsy198702018
gu_ohongtao@163.com 13261525931
millsunny@gmail.com aritn2006
jiayongxu111@126.com 19841021
83788981@163.com 83788981
answer0816@hotmail.com 8642932932
xiacaixia123@yahoo.cn 19880622
502116381@qq.com 861106tt
z407582258@163.com ss861213
markcorp@126.com 19780829
YJH86063336@126.COM 86063336
chendandan_dana@163.com 860414ailaopo
liguangyansd@163.com 369066352
zhang_hong_zhou@126.com 452383abc
dtskyline@yahoo.com.cn 25796776
lightning_leo@sina.com x19880301
dclili@126.com donglili19890206
rufus-shinra@hotmail.com shinra21
42636337@qq.com gz2345289
caojinyun8@126.com caojinyun
492664447@qq.com dsh989224
937775408@qq.com 892500ljp
363694957@qq.com 4925986ww
xoqnxobusi@163.com huangyan45
falorlee@126.com x515253545
lyhrose@126.com lyh5330400
694018603@qq.com 78264350
jrtwaim@sina.com 110106wang
178142815@qq.com dai881002
wangkaicheng06@21cn.com wkc06870310
ykbjm@qq.com ykbjm1207
showme_ok@126.com ziyun121
frances_1220@yeah.net jiajia12201114
lihuan_@126.com zzy890408
zhaishenqiu@163.com suxiaoyuan
daobaxian@126.com we123456798
josh8866@163.com josh8866
ericxia1008@hotmail.com 19811008
huangxinhard@yahoo.com.cn woshiniba
liu28333613@sina.com.cn lc19890306
wjspurple@msn.com 19901015
729113317@qq.com wozaitianjin
343831779@qq.com 15825797820
hjh1986@sina.com.cn 48479031
sunxinjue521@163.com xinjue521
chen30811@sina.com baobao1024
fzy7741@163.com fengzhiyi
fpe90000@163.com 8632211q
zhengjun-1125@hotmail.com zhengjun851125
nmgdr@163.com dingrong001
zhenghancheng@126.com java292599
qd2663@163.com 176687154
sgqhit@eyou.com sgq6419937
parenth@163.com 19801234
zhunqingyuan@yahoo.com.cn 185267623
zwc_ying@163.com ying451104
congrong-2008@163.com 19841006wy
xiongjilio@sina.com qwe850726
mack13013@yahoo.com.cn greed13013
jiaoyanhuang@sohu.com hjy911654
156798687@qq.com 19861024
jie270@hotmail.com zhaojie123
luckysam@163.com 789456123
276569116@qq.com love@qiqi77
a634741623@21cn.com 3359650*
pbz14679@sina.com 199088ae86
cyycydgs@163.com zzxx711531cc
mfyang@163.com ymf123456
77756098@qq.com dqh5718981
liqidi289568@sina.com li13721080449
terryshow@126.com terry654825
muyimuying007@163.com muying007
purelixuer@sina.com lixuer411812
tls_gaby@163.com 19870904gaby
397171187@qq.com 242805110
240260944@qq.com 860515251
lixuanyun1314@126.com 19841004
ks3000@126.com ks123123
495851189@qq.com 19861215
woxiangsi88@163.com wuya8888
40286179@qq.com lsh2201649
zww1987@126.com zww19870927
liuli_8706@126.com liu1987l
592118824@qq.com l19900825
344486831@qq.com 861215aaa
285428695@qq.com huang19891120
wuxi452@sina.com jacob452
812239246@qq.com zhongzhi
378045873@qq.com woaiwoziji11.
hn_chengbin@163.com my5882313
sep.tember@tom.com zhanghj!
xuxin282@yahoo.com.cn 84198879
wuying100@yahoo.com.cn 65503899
love_guoning@163.com 19820515
ENG@BIOLAND.COM.HK 12325800
chjr505@qq.com chjrchjr
edrtu@163.com caohui20
z._a1986@126.com woyaoquni
100438439@qq.com 27099302
tianfuxinming@163.com 19860125
249178895@qq.com zjfmnkjxy
86617997@qq.com 548956377
zz159504@126.com zz813552
524397747@qq.com ss433g14
bolthschja02@yahoo.cn meine166166
c370641594@sina.com czy7363191
zgyx1117@qq.com 13958050281
philopan@126.com ykjunykjun
jmsh666@tom.com 13854010906
656433783@qq.com sjw215836
wjwvip2008@yahoo.com.cn tjf80623
54cain@sina.com yinming1990417
aaaxialijun@126.com suncjk1234
117052264@qq.com 319cygxxzm
zhouyoulovewj@126.com 64930088220
383265454@qq.com longhui110
handanhhp@163.com stdent_226
1132565459@qq.com lq3302052
yanjianchao@126.com 1jianchao
yiailaopo1314@vip.qq.com rui5201314
516254788@qq.com 123456123
121901495@qq.com abcd200111
caorongchao@yahoo.cn crc880930
jamandcake@163.com virus163
ddhamj@126.com aobai001018
yuanlei521775@163.com Y649399650
478915757@qq.com 531010228805qpp
huhu18805915@yahoo.com.cn 18805915
txmgyj@sina.com 121906
shenchao123123@sina.com 19850119
yuandan0516@163.com yd19820123
lywpyczxj@163.com yc690613
luolinxhj@126.com 408590234
alphauslee@vip.qq.com bl29212250
linkzhangyankai@sina.com.cn didx6626e3
ailoveyou1110@163.com 313567914
wanghai-t@163.com wht1314dcl
790281596@qq.com sanwawoaini
787206337@qq.com shishang
823240174@qq.com YB441716
ht8688@21cn.com h11111111
nhyhyy@163.com nhy750627
mujie319@hotmail.com 65431613
xiaolaoshu78@yahoo.com.cn qwert123
lin.green@gmail.com lingeling
yuqingbing@163.com hahaha8230612
jaminmao@msn.com coffeecat0223
jackymao-java@163.com mh781219
pspwang2009@163.com wangshiheng
554288634@qq.com wzp622188368
xuanwanfu74110@126.com 4915002123
mogongliguligu@163.com 907651521
liaomagic@qq.com liao778087
727060916@qq.com san520san
zhonghongwei0319@foxmail.com zhongadmin
chuanchuan3214@sina.com ballet663271
wjfen2008@qq.com 12121608
ycgdbl@126.com lcd1104087
yangzhi_xiang@126.com 54305430
393124527@qq.com 42685130
wluping@263.net s9cwklbb
lioushao_251575572@qq.com 251575572
viain331@qq.com wxy1989331
liangjingnan@163.com a4101358
wls_198209@163.com wls123456
welchsloan@yahoo.com.tw 711111qwer
362803494@qq.com 19810517
beautifulmikezr@qq.com 123456free
zhang617yu@163.com shmily617
kelejiabinglove@qq.com yang0127ye
370055815@qq.com wdqqs19862008
luobin55555@sina.com 19851024
richa_xwd@yahoo.com.cn 13358385033
william0218@163.com 19970303
lixun0131@163.com 79397939
gllee@avl.com.cn 277202388
lianrzhang89805@yahoo.com.cn jncc89805
shijihong_888@126.com as197088
jianglinx@163.com 13937180767
eaglezmg@163.com iam19791013
juwenfei12@sina.com 870131jwf
fengtian136@126.com 4038522sam
danis.z@163.com danis194910
105247611@QQ.com 20020304
45588380@qq.com aunu2wgna
xuxz007@126.com 860822xxz
447483182@qq.com xu199111
zw_524@163.com z97067511w
wegkiwong@yahoo.cn 19831010
jiashiru0330@yahoo.com.cn jiashiru0224
c4390362guo@126.com 13104063881
zxx19890327@163.com zxx19890327
xzsuoer@126.com 62648600
49370340@qq.com 441019znl
bobing0077@sina.com bobing0077
meilirensheng521@yahoo.com.cn 521dongxu
hongwei_yang@tom.com HWYang.47927
k244561213@126.com kissk0506
huangker@163.com 2282124hhl
rongzai08@sina.com shiyi8510260
xinv19shi@126.com 7835778aaa
zhangjinpu@21cn.com 60131728
309836406@qq.com gf7788520
86331018@qq.com 19880313
136208159@qq.com 136208159
beyond11101@sina.com 19851018
slamhacker999@163.com 13032027669
tashideleh@yahoo.com.tw chlu2000
reytao@163.com jsnxyn6604
xuefeiyuwu@126.com yy528800
guoweihong123000@yahoo.com.cn 19831130
yangqi0624@sina.com 286958598
itsayr@gmail.com FfbCcs525
453764168@qq.com 19887758
23663549@qq.com lyg1682553
ttffss@163.com 68971140
569875840@qq.com 52240397
candy52608@126.com 5796153AB
285532323@QQ.com comehere
137924131@qq.com 19880225
jinbahuazi@163.com 151227ling
404499043@QQ.COM W6737143
koyard@sina.com ko01581124
007zhihuohu@163.com 197819huohuzhi007
DUANKYLIN@163.COM LOGINUSER
linshuangyong@126.com lin348333
642681614@qq.com lizifeng0213
335877330@qq.com 1137829465
sxlinda@126.com su850320
qqll564967661@126.com 19880209
asawyuier@126.com 19830920
lyh4226@126.com 3841231308
zxm@spty.com.cn thuglife
huangrw@cwcct.com huangghkbp
rongjch@163.com rongjch@LAVA
19870702@163.com fantasy179
642372796@qq.com zwx3741192
29154097@qq.com y050307035
wjie8588@yahoo.cn wjie8588
bupt.j.mao@gmail.com 041032MJbupt
jimmymf4164@126.com jimmymf4164
akhloveyou@126.com akh1982826
xiazhaohui4@126.com xia841124
skydi@126.com 528544697
zlqqq123@126.com r1986d54
732775164@qq.com 732775164
zfeng_22@hotmail.com adjsnfeng122
yangquanangle@163.com yq055236235
tozhanglijiang@sina.com 198623zlj
water-078@163.com wang3949
hehehao126@126.com 1984927as
373191654@163.com 45678zjh
lightningjinyu@126.com 1074249899
wuwench@126.com 142317abc
wuyuanqin@hotmail.com sz978285
290419197@qq.com rong6831930@!
1981.dl@163.com dinglin123
Steve_hust@163.com Steve_hust
axinno1@qq.com 123456..
904046782@qq.com zzj199096
zqqaiting@vip.qq.com zqq294511
lijiangyonghefang@163.com 554663951
zh76549591@sina.com 19870925
335489426@qq.com klmnopq123
daiyulong521d@163.com daiyulong521
45057074@qq.com wmhaohaoguo
415205506@QQ.com xiaojiji
297437326@qq.com liwei212936
liangbiaoyin99@yahoo.cn liang5920001241;
334516748@qq.com 50849903a
shenxinhua@163.com 13915915362
zz.christopher2000@gmail.com z675430176z
13603583072zl@163.com zs040529
yttanghan@163.com qing0408
wangqian224315@126.com 02243115ok
214311416@qq.com bb6395861
xzhh2004@yahoo.com.cn 123456qa
zhuyunwei120231@sina.com zyw7158406458717
sindorer@sina.com 19791219
sharpheel@126.com 217285george
lj_jackie@sina.com visual99
472870403@qq.com z12q64j809zqj
chenrudong@hotmail.com meimei256256
relax_2003@163.com linbaijing001579
clkang@gmail.com olukan912
yiexiaoyao@yahoo.com.hk z9712438
331449423@qq.com 13299175807
tlbjj@qq.com tlbjj582159
liyinhui20080527@126.com li13872211069
824228176@qq.com ff13328813015
zjp410@tom.com 438951276
xt_forest@126.com 42946565
lnj1982@126.com woshizuibangde
lincaiquan@126.com SSS123456789
wfnh1219@yahoo.com.cn 12191126
249450096@qq.com zz000000
hahan520@qq.com as4322490
490142738@qq.com 13934150914
macyufan@126.com yufanadmin
123002984@qq.com xcl19820412818
nest.of.denglibo@126.com david19851011
donna6@163.com donna1978122
gyp000@126.com 13152994427
chjl1030@163.com 19821030
earthware.gong@gmail.com earth_quake
7980718@qq.com wei7772089
kenanyesme@163.com 65653658hd
habitshaveyou1@163.com 81353096x
zqqshishangliu@163.com zqqsslno1
yuchun66xia@163.com zouhai88bao
277579829@qq.com 13066630637
elizabethxia@126.com 19840720
441288709@qq.com ww675050
whcgjob@163.com whcgwhcg
liu20041118@126.com 13945385661
yhwang@cndrealty.com wang9866122
83986348@163.com cqh84228422
ymx860723@163.com ymx7644766
scut_caixiaobo@126.com cxb198309
meiyou051@163.com Lch-0718
358535882@qq.com 581102400
454421344@qq.com zxllove5201314
cucuwen1122@yahoo.com.cn 69658yhl
wt05390531@126.com 159666110
adsnowchen@163.com 821101win
676366869@qq.com 676366869
565119996@qq.com zca816200
454562465@qq.com 454562465
guixian1314@163.com gx211314
shiqian858790@126.com my27384204
282347238@qq.com djtang2008
lansetuerqi1987@163.com 770438528
sbihymihauko@163.com sbihymihauko
jjhb01j@163.com jjhb0128
mmkgg0@126.com asd6780694
siu26889@vip.163.com 13828898
sunzehao.live@yahoo.com.cn haozesun
yangnan198512@qq.com abc198512
you3366@163.com nuoyaad123
zhangbinbin501@163.com zbb852654
361095922@qq.com q8861059
mumu725@126.com 969072500
shi_on@163.com 54sc1989
songqing_789@163.com a58275827
gzryaz22@163.com lb851210
yxm640112@126.com 65636112
fuyuncat@gmail.com Steps123
afterain@163.com neo17862
liangbb2002@163.com liangbb811103
wangyangbulao2004@yahoo.com.cn 801225
valenwon@sina.com 81330pxs
carrie@szepic.com ibelieve
wanghairui915510@163.com 850510541
lsh369-521@163.com lsh881026
gsh1016@163.com gshwml725588
806887319@qq.com cxq64110495
bnna7464259@126.com 16109490
cysumi@yahoo.cn benben1124
keryaboy@163.com 3819726234
lihui8868@163.com 11007aassbb
52zanzhu@163.com chengli19850825
120221096@qq.com 446768695
529716526@qq.com 860410qw
305738500@QQ.com 13082962455
984033@163.com 2500474c
xumin11110@163.com 13394826623
wangtao620@yahoo.cn aiting620724
399340196@qq.com 172825722
780740963@qq.com xiaobai0
zhenghuajin@126.com 135233zhj
517562231@qq.com liuleilei
whishtr@sohu.com Gjl902692
mawei025@gmail.com mawei026170
zhaoliang820128@126.com niuniu820128
519569215@qq.com 1988jwj1202
nfwh1986@sina.com 69412797
happyzhouyuanyuan@yahoo.com.cn zhou1113yuan
gxn.happy@163.com abc1123581321
705852170@qq.com ml3214911
inlovexy@126.com zhoubore
398184027@qq.com 64fxcctv3
lovejinzi@2008.sina.com jinzi0110
zhengwei042@163.com zcw51404021985
123456-26535@163.com 6338988***
dyfvvv@sina.com dyfvvv011401
wenjingsun2128@yahoo.com.cn jinshaowu
yuze0723@sina.com qxg13669273518
shizhig@163.com 13834202003
dtzxgjh@163.com gjh19871108
397417422@qq.com zhougong518
baihua7913@sina.com baihua7913
zycwoo1@126.com 9875643200
409497542@qq.com 111000aa
xun199012@163.com x1990127
852275263@qq.com xwl198209
chenchangpin@tom.com 8213520ccpin
xiaoshanshan.06@163.com digua661222
mrsun00007@126.com ken))))00007
649222739@qq.com gao858687
cathy81wx@yahoo.com.cn w6717463x
zhaoxiaofei198612@163.com abc88451
jie_0349@163.com ri123nima0891
xchj0668@126.com 44525435
niweisu@hotmail.com 19831214
GENIUSNIMURA@HOTMAIL.COM 17561969
xfy333@126.com ltxfy4578
45408219@sohu.com 43266626
hcf198521@126.com 194910hcf
sunkea2000@163.com 123qweasd
825365171@qq.com 48528341234
asangly@163.com 261583181
alwayslover168@yahoo.com.cn ljh201314ASPOIL
god0700@sina.com xulvzhang526527
galahad87@163.com gx123456
30428169@qq.com 98680719
tuzhichao10@sina.com 87324733
fuhin511@hotmail.com fubin2008
loosslily@yahoo.com.cn zhangfeng520
xiaolunyu@163.com 20281128
402053294@qq.com wei12755
xmsylnhclc@yahoo.com.cn woshizhuna
jay-oo2@163.com aiming002
fengyun8680@yeah.net 122333asz
zdl9222@163.com zdl922zdl922
hellosteveluo@163.com lgl428267
bergzhou@foxmail.com zhouyang
582827060@qq.com sxm198891
14141104@163.com 55853556
jixiangfreestyle@163.com 870405haha
wl05231256@sina.com 26922551
283447867@qq.com 072377qa
67735497@qq.com 123456aa
yicheng4877@163.com 416830426
napl_dd@126.com 11162823
mming63@163.com aa7675269
wy19870408@163.com wy311321
kmyforever88@126.com KONG252024
frankzhanggg@gmail.com 860806866
huhaozan001@163.com zan320578
piaoxue316@qq.com 212316@wang
hekai16888168@hotmail.com hekai870201
843878631@qq.com 369258ss
403304108@qq.com 089523jing
904389347@qq.com 13752577899
xiang_wei8@163.com xw4223084
Parin.love@163.com MUSIC666
123@liuyunpeng.com lyp7971158
zqrwp@163.com 13036zqrwp
caobenmoli@gmail.com wodemima
460326278@qq.com 13798169808
51506030@qq.com hzf19851015
751314877@qq.com 123`qwe4
zhangmengis007@163.com sos1988930
vinnsy@vip.sohu.com muryanv11
siyingying_762@sina.com 820710sy
zzmholly@qq.com 19900625zzm
yuyu875@126.com 8222875yuyu
happycaoqing@sina.com 3685637asdf
xinmeng19850520@yahoo.com.cn 19850520
100204300@qq.com lcxc6200557
xxmxxm1963113@163.com xxm147258
awencyw@163.com 19820906
81164230@QQ.com 81164230