{"uuid": "ea100d6c-9311-4ecd-8d64-2f91dbdd400f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-31324", "type": "seen", "source": "https://t.me/HackerNewsAR/2150", "content": "\u064a\u0639\u062b\u0631 \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u0639\u0644\u0649 \u0645\u0646\u0635\u0627\u062a SAP NetWeaver \u0627\u0644\u0645\u062a\u0623\u062b\u0631\u0629 \u0645\u0646 \u062e\u0644\u0627\u0644 \u0639\u062f\u0629 \u0623\u0633\u0627\u0644\u064a\u0628 \u0648\u0623\u062f\u0648\u0627\u062a \u062a\u0639\u062a\u0645\u062f \u0639\u0644\u0649 \u0627\u0644\u0645\u0633\u062d \u0627\u0644\u0634\u0628\u0643\u064a \u0648\u062c\u0645\u0639 \u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a\u060c \u0648\u0623\u0647\u0645\u0647\u0627:\n\n\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0645\u062d\u0631\u0643\u0627\u062a \u0627\u0644\u0628\u062d\u062b \u0627\u0644\u0645\u062e\u0635\u0635\u0629 \u0644\u0644\u0623\u062c\u0647\u0632\u0629 \u0648\u0627\u0644\u062e\u062f\u0645\u0627\u062a (\u0645\u062b\u0644 Shodan, Censys):\n\n\u064a\u0628\u062d\u062b \u0627\u0644\u0645\u0647\u0627\u062c\u0645\u0648\u0646 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0643\u0644\u0645\u0627\u062a \u0645\u0641\u062a\u0627\u062d\u064a\u0629 (dorks) \u0623\u0648 \u062a\u0648\u0642\u064a\u0639\u0627\u062a \u0645\u0639\u064a\u0646\u0629 \u062a\u0643\u0634\u0641 \u0639\u0646 \u0648\u062c\u0648\u062f \u0648\u0627\u062c\u0647\u0627\u062a SAP NetWeaver \u0627\u0644\u0645\u0643\u0634\u0648\u0641\u0629 \u0639\u0644\u0649 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a\u060c \u0645\u062b\u0644 \u0627\u0644\u0628\u062d\u062b \u0639\u0646 \u0639\u0646\u0648\u0627\u0646 \u0635\u0641\u062d\u0629 \u062a\u0633\u062c\u064a\u0644 \u0627\u0644\u062f\u062e\u0648\u0644 \u0623\u0648 \u0644\u0627\u0641\u062a\u0627\u062a http \u062a\u0634\u064a\u0631 \u0625\u0644\u0649 NetWeaver Application Server.\n\n\u0623\u0645\u062b\u0644\u0629 \u0644\u0639\u0645\u0644\u064a\u0627\u062a \u0627\u0644\u0628\u062d\u062b:\n\nhttp.title:\"SAP NetWeaver Application Server\"\n\n\u0627\u0644\u0628\u062d\u062b \u0636\u0645\u0646 \u0646\u0637\u0627\u0642\u0627\u062a \u0627\u0644\u0634\u0631\u0643\u0627\u062a \u0627\u0644\u0643\u0628\u0631\u0649 \u0623\u0648 \u0639\u0646\u0627\u0648\u064a\u0646 \u0627\u0644\u0645\u0624\u0633\u0633\u0627\u062a \u0627\u0644\u062d\u0643\u0648\u0645\u064a\u0629.\n\n\u0641\u062d\u0635 \u0627\u0644\u0628\u0648\u0631\u062a\u0627\u062a \u0627\u0644\u0634\u0627\u0626\u0639\u0629 \u0627\u0644\u062e\u0627\u0635\u0629 \u0628\u0640 SAP:\n\n\u0645\u0646\u0635\u0627\u062a SAP NetWeaver \u063a\u0627\u0644\u0628\u064b\u0627 \u0645\u0627 \u062a\u0643\u0648\u0646 \u0645\u062a\u0627\u062d\u0629 \u0639\u0644\u0649 \u0645\u0646\u0627\u0641\u0630 \u0645\u062d\u062f\u062f\u0629 \u0645\u062b\u0644 50000\u060c 50013\u060c 8000\u060c 8080 \u0648\u063a\u064a\u0631\u0647\u0627.\n\n\u064a\u0645\u0643\u0646 \u0644\u0644\u0623\u062f\u0648\u0627\u062a \u0645\u062b\u0644 nmap \u0625\u062c\u0631\u0627\u0621 \u0645\u0633\u062d \u0644\u0647\u0630\u0647 \u0627\u0644\u0645\u0646\u0627\u0641\u0630 \u0648\u0627\u0644\u0639\u062b\u0648\u0631 \u0639\u0644\u0649 \u0627\u0644\u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0645\u0643\u0634\u0648\u0641\u0629.\n\n\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0623\u062f\u0648\u0627\u062a \u0643\u0634\u0641 \u0646\u0642\u0627\u0637 \u0627\u0644\u0646\u0647\u0627\u064a\u0629 \u0648\u0636\u0639\u0641 \u0627\u0644\u062d\u0645\u0627\u064a\u0629:\n\n\u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0645\u0633\u062d (scanner) \u0645\u062b\u0644 Onapsis\u060c \u0623\u0648 \u062d\u062a\u0649 \u0623\u062f\u0648\u0627\u062a \u0645\u0641\u062a\u0648\u062d\u0629 \u0627\u0644\u0645\u0635\u062f\u0631 \u0645\u062b\u0644 Metasploit modules\u060c \u062a\u0633\u062c\u0644 \u0646\u0642\u0637\u0629 \u0646\u0647\u0627\u064a\u0629 metadatauploader \u0623\u0648 \u0635\u0641\u062d\u0629 Visual Composer \u0627\u0644\u0645\u0641\u062a\u0648\u062d\u0629.\n\n\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0623\u062f\u0644\u0629 \u0645\u0646 \u0627\u0644\u0634\u0647\u0627\u062f\u0627\u062a \u0623\u0648 \u0631\u0624\u0648\u0633 HTTP:\n\n\u0623\u062d\u064a\u0627\u0646\u064b\u0627 \u062a\u0643\u0634\u0641 \u0631\u0624\u0648\u0633 (Headers) http \u0623\u0648 \u062d\u062a\u0649 \u0627\u0644\u0634\u0647\u0627\u062f\u0627\u062a \u0627\u0644\u0631\u0642\u0645\u064a\u0629 \u0639\u0646 \u0625\u0635\u062f\u0627\u0631 \u0627\u0644\u0633\u064a\u0631\u0641\u0631 \u0648\u0647\u0648\u064a\u062a\u0647.\n\n\u0627\u0644\u0645\u0639\u0644\u0648\u0645\u0627\u062a \u0627\u0644\u0645\u0633\u0631\u0628\u0629 \u0623\u0648 \u0641\u0647\u0627\u0631\u0633 \u0627\u0644\u0625\u0646\u062a\u0631\u0646\u062a:\n\n\u0642\u062f \u062a\u0648\u0641\u0631 \u0628\u0639\u0636 \u0627\u0644\u0641\u0647\u0627\u0631\u0633 \u0623\u0648 \u062a\u0633\u0631\u064a\u0628\u0627\u062a \u0627\u0644\u0628\u064a\u0627\u0646\u0627\u062a \u0639\u0646\u0627\u0648\u064a\u0646 \u0623\u0646\u0638\u0645\u0629 SAP \u0645\u0643\u0634\u0648\u0641\u0629 \u0623\u0648 \u0643\u0644\u0645\u0627\u062a \u0633\u0631 \u0636\u0639\u064a\u0641\u0629 \u0623\u0648 \u0627\u0641\u062a\u0631\u0627\u0636\u064a\u0629.\n\n\u0634\u0631\u062d \u0627\u0644\u062b\u063a\u0631\u0629 \u0628\u0627\u0644\u062a\u0641\u0635\u064a\u0644\n\u0627\u0644\u0645\u0643\u0648\u0646 \u0627\u0644\u0645\u062a\u0623\u062b\u0631: SAP NetWeaver Application Server Java\u060c \u0648\u062d\u062f\u0629 Visual Composer.\n\n\u0637\u0631\u064a\u0642\u0629 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644: \u0627\u0644\u0645\u0634\u0643\u0644\u0629 \u062a\u0643\u0645\u0646 \u0641\u064a \u063a\u064a\u0627\u0628 \u0627\u0644\u062a\u062d\u0642\u0642 \u0645\u0646 \u0627\u0644\u062a\u0641\u0648\u064a\u0636 (Missing Authorization Check) \u0639\u0646\u062f \u0646\u0642\u0637\u0629 \u0627\u0644\u0646\u0647\u0627\u064a\u0629 /developmentserver/metadatauploader\u060c \u062d\u064a\u062b \u064a\u0633\u0645\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0628\u0625\u0631\u0633\u0627\u0644 \u0637\u0644\u0628\u0627\u062a POST \u062a\u062d\u062a\u0648\u064a \u0639\u0644\u0649 \u0645\u0644\u0641\u0627\u062a \u062e\u0628\u064a\u062b\u0629 (\u0645\u062b\u0644 Web Shell \u0623\u0648 \u062a\u0637\u0628\u064a\u0642\u0627\u062a JAR \u0623\u0648 ZIP).\n\n\u064a\u0642\u0648\u0645 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0628\u0625\u0631\u0633\u0627\u0644 \u0637\u0644\u0628\u0627\u062a POST \u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644 \u062b\u063a\u0631\u0629 \u0645\u062b\u0644 CVE-2025-31324 \u0639\u0627\u062f\u0629 \u0639\u0628\u0631 \u0623\u062f\u0648\u0627\u062a \u0645\u062a\u062e\u0635\u0635\u0629 \u062a\u062a\u064a\u062d \u0644\u0647 \u0635\u064a\u0627\u063a\u0629 \u0648\u0625\u0631\u0633\u0627\u0644 \u0637\u0644\u0628\u0627\u062a HTTP \u0628\u0634\u0643\u0644 \u064a\u062f\u0648\u064a \u0623\u0648 \u062a\u0644\u0642\u0627\u0626\u064a\u060c \u0648\u0623\u0634\u0647\u0631 \u0627\u0644\u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0645\u0633\u062a\u0639\u0645\u0644\u0629:\n\n\u0623\u062f\u0648\u0627\u062a \u0627\u0644\u0647\u062c\u0648\u0645 \u0644\u0625\u0631\u0633\u0627\u0644 \u0637\u0644\u0628\u0627\u062a POST\ncurl\n\n\u0623\u062f\u0627\u0629 \u064a\u0646\u062a\u062c\u0647\u0627 \u0646\u0638\u0627\u0645 \u0644\u064a\u0646\u0643\u0633 (\u0648\u0645\u062a\u0648\u0641\u0631\u0629 \u0644\u0643\u0644 \u0627\u0644\u0623\u0646\u0638\u0645\u0629)\u060c \u062a\u062a\u064a\u062d \u0625\u0631\u0633\u0627\u0644 \u0637\u0644\u0628\u0627\u062a HTTP/HTTPS \u062d\u0633\u0628 \u0627\u0644\u0631\u063a\u0628\u0629.\n\n\u0645\u062b\u0627\u0644 \u0627\u0633\u062a\u062e\u062f\u0627\u0645:\n\nbash\ncurl -k -X POST -F \"file=@webshell.jsp\" https://target-sap-server/metadatauploader\n\u064a\u0645\u0643\u0646 \u0628\u0647\u0627 \u062a\u062d\u062f\u064a\u062f \u0646\u0648\u0639 \u0627\u0644\u0645\u062d\u062a\u0648\u0649\u060c \u0645\u0644\u0641 \u0627\u0644\u0625\u0631\u0633\u0627\u0644\u060c \u0625\u0639\u062f\u0627\u062f \u0631\u0624\u0648\u0633 \u0627\u0644\u0637\u0644\u0628 \u0648\u0643\u0644 \u0627\u0644\u062a\u0641\u0627\u0635\u064a\u0644 \u0627\u0644\u0645\u0637\u0644\u0648\u0628\u0629.\n\nBurp Suite\n\n\u0623\u062f\u0627\u0629 \u0627\u062e\u062a\u0628\u0627\u0631 \u0627\u062e\u062a\u0631\u0627\u0642 \u0645\u062a\u0642\u062f\u0645\u0629\u060c \u062a\u062a\u064a\u062d \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u0623\u0648 \u0645\u062e\u062a\u0628\u0631 \u0627\u0644\u0623\u0645\u0646 \u0625\u062c\u0631\u0627\u0621 \u0648\u0641\u062d\u0635 \u0648\u062a\u0639\u062f\u064a\u0644 \u0623\u064a \u0637\u0644\u0628 HTTP (GET/POST).\n\n\u064a\u0645\u0643\u0646 \u062a\u0639\u062f\u064a\u0644 \u0627\u0644\u0637\u0644\u0628\u0627\u062a \u0645\u0628\u0627\u0634\u0631\u0629 \u0639\u0628\u0631 \u0648\u0627\u062c\u0647\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0623\u0648 \u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0623\u062f\u0648\u0627\u062a \u0627\u0644\u062a\u0643\u0631\u0627\u0631 (Repeater/Intruder) \u0644\u0625\u0631\u0633\u0627\u0644 \u0639\u062f\u0629 \u0637\u0644\u0628\u0627\u062a \u0645\u062e\u062a\u0644\u0641\u0629 \u0648\u0645\u0644\u0627\u062d\u0638\u0629 \u0627\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629.\n\nPostman\n\n\u062a\u0637\u0628\u064a\u0642 \u0645\u062a\u0643\u0627\u0645\u0644 \u0644\u0625\u0631\u0633\u0627\u0644 \u0637\u0644\u0628\u0627\u062a HTTP \u0648\u062a\u0637\u0648\u064a\u0631 \u0648\u0627\u062c\u0647\u0627\u062a API. \u064a\u062a\u064a\u062d \u0625\u0631\u0633\u0627\u0644 \u0645\u0644\u0641\u0627\u062a\u060c \u062a\u0639\u062f\u064a\u0644 \u0627\u0644\u062d\u0642\u0648\u0644 \u0648\u0627\u0644\u0631\u0624\u0648\u0633\u060c \u0648\u062a\u062d\u0644\u064a\u0644 \u0627\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0627\u062a.\n\n\u064a\u0633\u062a\u062e\u062f\u0645 \u063a\u0627\u0644\u0628\u064b\u0627 \u0641\u064a \u0627\u0644\u0627\u062e\u062a\u0628\u0627\u0631 \u0627\u0644\u064a\u062f\u0648\u064a \u0644\u0631\u0624\u064a\u0629 \u0627\u0644\u0627\u0633\u062a\u062c\u0627\u0628\u0629 \u0648\u062a\u0643\u0631\u0627\u0631 \u0627\u0644\u0637\u0644\u0628\u0627\u062a.\n\n\u0623\u062f\u0648\u0627\u062a \u0628\u0631\u0645\u062c\u064a\u0629 \u0623\u0648 \u0633\u0643\u0631\u0628\u062a\u0627\u062a \u0628\u0644\u063a\u0629 Python/JavaScript\n\n\u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0627\u0644\u0645\u062a\u0642\u062f\u0645 \u0642\u062f \u064a\u0643\u062a\u0628 \u0633\u0643\u0631\u0628\u062a \u0645\u062e\u0635\u0635 \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 \u0645\u0643\u062a\u0628\u0627\u062a \u0645\u062b\u0644 requests (Python) \u0623\u0648 axios (JavaScript) \u0644\u0625\u0631\u0633\u0627\u0644 \u0637\u0644\u0628\u0627\u062a POST \u062a\u0644\u0642\u0627\u0626\u064a\u0629 \u062d\u0633\u0628 \u0633\u064a\u0646\u0627\u0631\u064a\u0648 \u0627\u0644\u0647\u062c\u0648\u0645.\n\n\u0645\u062b\u0627\u0644 \u0639\u0645\u0644\u064a \u0628\u0627\u0633\u062a\u062e\u062f\u0627\u0645 curl:\n\nbash\ncurl -k -X POST -F \"file=@webshell.jsp\" https://target-sap-server/metadatauploader\n\u0647\u0643\u0630\u0627 \u064a\u0631\u0633\u0644 \u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u0645\u0644\u0641 \u062e\u0628\u064a\u062b \u0625\u0644\u0649 \u0645\u0633\u0627\u0631 \u0646\u0642\u0637\u0629 \u0627\u0644\u0646\u0647\u0627\u064a\u0629 \u0641\u064a SAP NetWeaver\u060c \u0648\u064a\u0641\u062d\u0635 \u0627\u0633\u062a\u062c\u0627\u0628\u0629 \u0627\u0644\u062e\u0627\u062f\u0645 \u0644\u0644\u062a\u0623\u0643\u062f \u0645\u0646 \u0646\u062c\u0627\u062d \u0627\u0644\u0647\u062c\u0648\u0645.\n\n\u0645\u0627 \u064a\u062d\u062f\u062b \u0639\u0646\u062f \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644: \u0627\u0644\u0646\u0638\u0627\u0645 \u064a\u0642\u0628\u0644 \u062a\u062d\u0645\u064a\u0644 \u0627\u0644\u0645\u0644\u0641 \u062f\u0648\u0646 \u0623\u0646 \u064a\u062a\u062d\u0642\u0642 \u0645\u0646 \u0635\u0644\u0627\u062d\u064a\u0629 \u0627\u0644\u0645\u0633\u062a\u062e\u062f\u0645 \u0623\u0648 \u064a\u0641\u062d\u0635 \u0627\u0644\u0645\u0644\u0641 \u0628\u0634\u0643\u0644 \u0622\u0645\u0646\u060c \u0645\u0627 \u064a\u0624\u062f\u064a \u0625\u0644\u0649 \u0625\u0645\u0643\u0627\u0646\u064a\u0629 \u062a\u0646\u0641\u064a\u0630 \u0643\u0648\u062f \u0628\u0631\u0645\u062c\u064a \u0636\u0627\u0631 \u0648\u062a\u062d\u0643\u0645 \u0643\u0627\u0645\u0644 \u0628\u0627\u0644\u062e\u0627\u062f\u0645 (RCE) \u0639\u0646 \u0628\u064f\u0639\u062f.\n\n\u062f\u0631\u062c\u0629 \u0627\u0644\u062e\u0637\u0648\u0631\u0629: CVSS 10/10 (\u062d\u0631\u062c \u062c\u062f\u064b\u0627)\u060c \u062d\u064a\u062b \u064a\u0645\u0643\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645\u064a\u0646 \u0627\u0644\u062a\u062d\u0643\u0645 \u0627\u0644\u0643\u0627\u0645\u0644 \u0628\u0627\u0644\u0646\u0638\u0627\u0645 \u0648\u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u062d\u0633\u0627\u0633\u0629\u060c \u0623\u0648 \u062a\u0639\u0637\u064a\u0644 \u0623\u0646\u0638\u0645\u0629 \u0627\u0644\u0623\u0639\u0645\u0627\u0644 \u0627\u0644\u062d\u0631\u062c\u0629.\n\n\u062a\u0623\u062b\u064a\u0631 \u0627\u0644\u062b\u063a\u0631\u0629 \u0648\u0623\u0647\u062f\u0627\u0641 \u0627\u0644\u0647\u062c\u0648\u0645\n\u0627\u0646\u062a\u0634\u0627\u0631 \u0648\u0627\u0633\u0639: \u0647\u0646\u0627\u0643 \u0623\u0643\u062b\u0631 \u0645\u0646 1200 \u0646\u0638\u0627\u0645 SAP NetWeaver \u0645\u0643\u0634\u0648\u0641 \u0644\u0644\u0625\u0646\u062a\u0631\u0646\u062a \u062d\u0648\u0644 \u0627\u0644\u0639\u0627\u0644\u0645 \u0645\u0639\u0631\u0636 \u0644\u0644\u062e\u0637\u0631.\n\n\u0623\u0645\u062b\u0644\u0629 \u0627\u0644\u0627\u0633\u062a\u063a\u0644\u0627\u0644:\n\n\u062a\u062d\u0645\u064a\u0644 Web Shell \u062e\u0628\u064a\u062b \u0625\u0644\u0649 \u0627\u0644\u0645\u062c\u0644\u062f j2ee/cluster/apps/sap.com/irj/servlet_jsp/irj/root/ \u0648\u0645\u0646 \u062b\u0645 \u0627\u0644\u0648\u0635\u0648\u0644 \u0627\u0644\u064a\u0647 \u0648\u062a\u0646\u0641\u064a\u0630 \u0623\u0648\u0627\u0645\u0631 \u0639\u0628\u0631 GET.\n\n\u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a \u0627\u0644\u0639\u0645\u0644\u0627\u0621 \u0627\u0644\u062d\u0633\u0627\u0633\u0629 \u0623\u0648 \u0627\u0644\u0645\u0627\u0644\u064a\u0629\u060c \u062a\u0639\u0637\u064a\u0644 \u0627\u0644\u0623\u0646\u0634\u0637\u0629 \u0627\u0644\u062a\u062c\u0627\u0631\u064a\u0629\u060c \u0627\u0644\u062d\u0631\u0643\u0629 \u0627\u0644\u062c\u0627\u0646\u0628\u064a\u0629 \u062f\u0627\u062e\u0644 \u0627\u0644\u0634\u0628\u0643\u0629 \u0648\u0627\u062e\u062a\u0631\u0627\u0642 \u0623\u0646\u0638\u0645\u0629 \u0623\u062e\u0631\u0649.\n\n\u0633\u064a\u0631 \u0627\u0644\u0639\u0645\u0644\u064a\u0629:\n\n\u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u064a\u062d\u0636\u0651\u0631 \u0645\u0644\u0641\u064b\u0627 \u062e\u0628\u064a\u062b\u064b\u0627 (\u0645\u062b\u0644\u0627\u064b: Web Shell\u060c \u0645\u0644\u0641 JAR \u0623\u0648 ZIP \u0645\u062f\u0645\u062c \u0628\u0643\u0648\u062f \u0636\u0627\u0631).\n\n\u064a\u0631\u0633\u0644 \u0647\u0630\u0627 \u0627\u0644\u0645\u0644\u0641 \u0643\u062c\u0632\u0621 \u0645\u0646 \u0637\u0644\u0628 HTTP POST \u0625\u0644\u0649 \u0645\u0633\u0627\u0631 \u0645\u062b\u0644:\n\n/irj/servlet/prt/portal/prtroot/com.sap.visualcomposer.dev.server.metadatauploader\n\n\u062e\u0627\u062f\u0645 SAP NetWeaver\u060c \u0628\u0633\u0628\u0628 \u062e\u0637\u0623 \u063a\u064a\u0627\u0628 \u0627\u0644\u062a\u062d\u0642\u0642\u060c \u064a\u0642\u0628\u0644 \u0627\u0644\u0645\u0644\u0641 \u0648\u064a\u0642\u0648\u0645 \u0628\u062a\u062e\u0632\u064a\u0646\u0647 \u0648\u062a\u0634\u063a\u064a\u0644\u0647 \u0643\u062c\u0632\u0621 \u0645\u0646 \u0646\u0638\u0627\u0645\u0647.\n\n\u0627\u0644\u0645\u0647\u0627\u062c\u0645 \u064a\u062a\u0628\u0639 \u0630\u0644\u0643 \u0628\u0637\u0644\u0628 HTTP GET \u0625\u0644\u0649 \u0645\u0644\u0641 \u0627\u0644\u0640 Web Shell (\u0623\u0648 \u064a\u0646\u0641\u0630 \u0645\u0644\u0641 \u062c\u0627\u0641\u0627 \u0623\u0648 \u0623\u0643\u0648\u0627\u062f \u0623\u062e\u0631\u0649)\u060c \u0644\u064a\u0628\u062f\u0623 \u0627\u0644\u062a\u062d\u0643\u0645 \u0627\u0644\u0643\u0627\u0645\u0644 \u0628\u0627\u0644\u0646\u0638\u0627\u0645.\n\n\u064a\u0645\u0643\u0646 \u0627\u0644\u0622\u0646 \u0644\u0644\u0645\u0647\u0627\u062c\u0645 \u062a\u0646\u0641\u064a\u0630 \u0623\u064a \u062a\u0639\u0644\u064a\u0645\u0627\u062a\u060c \u0633\u0631\u0642\u0629 \u0628\u064a\u0627\u0646\u0627\u062a\u060c \u0623\u0648 \u0627\u0644\u062a\u062d\u0631\u0643 \u062f\u0627\u062e\u0644 \u0627\u0644\u0634\u0628\u0643\u0629.", "creation_timestamp": "2026-07-15T10:00:04.591949Z"}