当前位置:WooYun >> 漏洞信息

漏洞概要 关注数(24) 关注此漏洞

缺陷编号:wooyun-2015-096103

漏洞标题:智联招聘DNS区域传送漏洞可导致大量域名指向外漏

相关厂商:智联招聘

漏洞作者: 小r00to1

提交时间:2015-02-06 21:56

修复时间:2015-03-23 21:58

公开时间:2015-03-23 21:58

漏洞类型:系统/服务运维配置不当

危害等级:高

自评Rank:15

漏洞状态:厂商已经确认

漏洞来源: http://www.wooyun.org,如有疑问或需要帮助请联系 [email protected]

Tags标签:

4人收藏 收藏
分享漏洞:


漏洞详情

披露状态:

2015-02-06: 细节已通知厂商并且等待厂商处理中
2015-02-07: 厂商已经确认,细节仅向厂商公开
2015-02-17: 细节向核心白帽子及相关领域专家公开
2015-02-27: 细节向普通白帽子公开
2015-03-09: 细节向实习白帽子公开
2015-03-23: 细节向公众公开

简要描述:

智联,有意思的事情58同城也来智联招聘。。。

详细说明:

1.智联招聘,你们都用过吧:www.zhaopin.com
2.nslookup信息:
<code>Non-authoritative answer:
zhaopin.com mail exchanger = 10 mx.zhaopin.com.cn.
Authoritative answers can be found from:
zhaopin.com nameserver = dns3.zhaopin.com.
zhaopin.com nameserver = dns2.zhaopin.com.
zhaopin.com nameserver = ns9.zhaopin.com.
zhaopin.com nameserver = dns4.zhaopin.com.
zhaopin.com nameserver = dns1.zhaopin.com.
zhaopin.com nameserver = ns8.zhaopin.com.
ns8.zhaopin.com internet address =

mask 区域
*****15*****

.5.28

mask 区域
*****net address*****
*****et address =*****
*****et address =*****
*****et address =*****
*****ddress = 59.15*****


传送泄露的信息:够庞大吧!!!
<code>
; <<>> DiG 9.8.3-P1 <<>> @ns8.zhaopin.com. axfr zhaopin.com
; (1 server found)
;; global options: +cmd
zhaopin.com. 86400 IN SOA dns1.zhaopin.com. root.dns1.zhaopin.com. 2015020403 28800 14400 3600000 600

mask 区域
*****MX	10 mx.zha*****
*****N NS dns1.z*****
*****N NS dns2.z*****
*****N NS dns3.z*****
*****N NS dns4.z*****
***** IN NS ns8*****
***** IN NS ns9*****
*****in.*****

86400 IN TXT "v=spf1 include:zhaopin.com.cn -all"

mask 区域
*****0	IN	A	59*****
***** 1200 IN A*****
*****00 IN A 19*****
*****m. 1200 IN A*****
*****m. 3600 IN*****
***** 3600 IN A*****
*****om. 3600 IN *****
*****. 3600 IN A*****
*****. 3600 IN A*****
*****opin.com. 120*****
*****m. 3600 IN*****
*****6400 IN A *****
*****m. 3600 IN*****
*****6400 IN A *****
*****3600 IN A *****
*****m. 3600 IN*****
*****m. 1200 IN*****
***** 86400 IN A*****
***** 3600 IN A *****
*****om. 3600 IN *****
***** 3600 IN A*****
*****1200 IN A *****
*****86400 IN A *****
*****1200 IN A*****
***** 86400 IN A*****
*****. 86400 IN A*****
*****3600 IN A *****
*****6400 IN CNAME*****
*****00 IN NS lns1*****
*****0 IN NS lns1.*****
*****00 IN A 21*****
*****com. 86400 I*****
*****.com. 86400 *****
*****. 86400 IN *****
*****. 3600 IN *****
*****com. 3600 I*****
*****. 3600 IN A*****
***** 86400 IN A*****
***** 3600 IN *****
*****3600 IN A *****
*****6400 IN A 1*****
*****. 3600 IN A*****
*****. 3600 IN A*****
*****m. 1200 IN*****
***** 3600 IN *****
***** 3600 IN A*****
*****com. 3600 IN*****
*****com. 3600 I*****
*****.com. 3600 I*****
*****n.com. 3600 I*****
*****n.com. 3600 *****
*****in.com. 3600 *****
*****m. 3600 IN *****
*****. 1200 IN *****
***** 3600 IN A*****
***** 1200 IN A *****
*****. 3600 IN *****


mask 区域
*****com. 3600	I*****
***** 3600 IN A*****
*****. 3600 IN A*****
*****m. 3600 IN *****
*****om. 3600 IN *****
*****3600 IN A *****
***** 3600 IN A*****
*****N CNAME amwayca*****
*****. 3600 IN A*****
*****m. 3600 IN *****
*****com. 3600 IN*****
*****om. 3600 IN*****
*****m. 3600 IN *****
*****om. 3600 IN*****
*****.com. 3600 I*****
*****om. 3600 IN*****
*****com. 3600 IN*****
*****.com. 3600 I*****
*****n.com. 3600 I*****
*****in.com. 3600 *****
*****om. 3600 IN*****
*****.com. 3600 I*****
*****.com. 1200 I*****
*****.com. 1200 I*****
*****.com. 86400 *****
*****om. 3600 IN*****
*****com. 3600 I*****
*****n.com. 3600 *****
*****om. 3600 IN*****
*****m. 3600 IN *****
*****om. 3600 IN*****
*****.com. 3600 I*****
*****. 3600 IN *****
*****pin.com. 3600*****
*****pin.com. 3600*****
*****com. 86400 I*****
*****com. 86400 IN*****
*****IN CNAME zhaop*****
*****86400 IN A *****
*****om. 3600 IN *****
***** 3600 IN A*****
*****600 IN A 1*****
*****3600 IN A 1*****
*****N CNAME wend*****
*****1200 IN A 1*****
*****m. 3600 IN*****
*****om. 3600 IN *****
*****n.com. 3600 I*****
*****6400 IN A *****
*****. 1200 IN *****
*****com. 3600 I*****
*****600 IN A 2*****
*****m. 1200 IN *****
*****n.com. 3600 *****
*****600 IN A 5*****
*****3600 IN A *****
*****m. 3600 IN*****
*****. 3600 IN A*****
*****om. 3600 IN *****
*****. 3600 IN A*****
*****m. 3600 IN *****
*****om. 3600 IN *****
*****00 IN MX 10 *****
*****200 IN A 21*****
*****m. 3600 IN *****
*****m. 1200 IN *****
*****400 IN A 5*****
***** 3600 IN A *****
***** 86400 IN A*****
***** 86400 IN A*****
*****in.com. 3600 *****
*****00 IN A 182*****
*****m. 1200 IN A*****
*****com. 3600 I*****
*****com. 1200 I*****
*****. 3600 IN A*****
*****200 IN A 2*****
*****om. 1200 IN *****
*****m. 3600 IN*****
*****m. 1200 IN*****


mask 区域
*****	86400	IN	A*****
***** 3600 IN A *****
*****.com. 86400 *****
*****om. 1200 IN*****
*****m. 3600 IN*****
*****com. 1200 IN*****
***** IN CNAME bei*****
*****. 3600 IN *****
*****1200 IN A *****
*****86400 IN A 2*****
*****00 IN A 21*****
*****3600 IN A*****
*****. 1200 IN A *****
***** 3600 IN *****
*****. 1200 IN A*****
*****. 86400 IN *****
*****400 IN A 5*****
***** 86400 IN A*****
*****. 3600 IN *****
*****. 3600 IN A*****
*****om. 3600 IN*****
*****200 IN A 5*****
*****om. 3600 IN*****
*****om. 1200 IN*****
*****m. 3600 IN *****
*****om. 3600 IN *****
*****86400 IN A *****
*****3600 IN A *****
***** 3600 IN *****
*****m. 1200 IN*****
*****3600 IN A*****
***** 86400 IN A*****
***** 3600 IN *****
*****m. 3600 IN *****
*****com. 3600 IN*****
*****om. 3600 IN *****
*****200 IN A 19*****
*****m. 3600 IN*****
*****om. 3600 IN*****
*****om. 1200 IN *****
*****. 1200 IN A*****
*****200 IN A 5*****
*****m. 3600 IN*****
*****om. 3600 IN*****
*****ME bluemoon.zhaop*****
*****com. 3600 I*****
*****com. 3600 I*****
*****ME bms.zhaopin.*****
*****1200 IN A*****
*****aopin.com. 8640*****
*****. 1200 IN A*****
*****. 3600 IN A*****
*****com. 3600 I*****
***** 3600 IN A*****
***** 3600 IN A*****
*****86400 IN A*****
*****3600 IN A*****
*****. 86400 IN A*****
*****3600 IN A*****
*****m. 3600 IN*****
*****200 IN A 19*****
*****200 IN A 19*****
***** 1200 IN *****
*****. 3600 IN A*****
*****om. 1200 IN*****
***** 3600 IN A*****
*****400 IN A 5*****
*****. 86400 IN *****
*****3600 IN A*****
*****3600 IN A*****
*****. 86400 IN *****
*****m. 3600 IN*****
*****om. 1200 IN*****
*****3600 IN A *****
*****. 86400 IN *****
*****86400 IN A *****
*****. 3600 IN *****
***** 3600 IN *****
***** 3600 IN *****
***** 3600 IN A *****
*****00 IN MX 10 *****
***** 1200 IN A*****
*****com. 86400 IN*****
*****. 86400 IN A*****
*****com. 86400 IN*****
*****m. 86400 IN *****
*****n.com. 3600 *****
*****ME campus1.zhaop*****
*****.com. 86400 I*****
*****com. 86400 IN*****
*****. 86400 IN A*****
*****in.com. 3600 *****
*****in.com. 1200 *****
*****in.com. 86400*****
*****in.com. 86400*****
*****com. 3600 I*****
*****om. 3600 IN *****
*****n.com. 3600 *****
*****om. 1200 IN*****
*****com. 3600 IN*****
*****com. 86400 I*****
*****m. 86400 IN *****
*****pin.com. 86400 *****
*****opin.com. 86400*****
***** 86400 IN A *****
*****om. 1200 IN*****
*****com. 1200 I*****
***** 1200 IN A *****
*****. 86400 IN A*****
*****m. 86400 IN *****
*****om. 86400 IN*****
*****.com. 86400 *****
*****om. 3600 IN*****
*****m. 86400 IN *****
*****m. 86400 IN *****
*****m. 1200 IN A*****
*****m. 1200 IN *****
*****m. 86400 IN *****
*****AME campusresume.zh*****
*****86400 IN A 2*****
*****com. 3600 IN*****
*****3600 IN A *****
***** 3600 IN A*****
*****m. 3600 IN *****
*****om. 1200 IN*****
*****.com. 86400 *****
*****AME canoncampus2015.*****
*****com. 86400 IN*****
*****pin.com. 3600*****
*****in.com. 3600 *****
*****.com. 3600 I*****
*****.com. 1200 I*****
*****m. 3600 IN *****
*****m. 86400 IN*****
*****om. 3600 IN*****
*****com. 3600 I*****
*****n.com. 3600 *****
*****om. 3600 IN*****


mask 区域
*****.	3600	IN	*****
*****3600 IN A*****
*****6400 IN A *****
*****. 86400 IN A*****
*****86400 IN A*****
*****0 IN A 211*****
*****00 IN A 192*****
*****com. 1200 I*****
*****.com. 3600 I*****
*****n.com. 3600 *****
*****in.com. 3600 *****
***** 86400 IN A*****
***** 1200 IN A*****
***** 3600 IN *****
*****1200 IN A *****
*****00 IN A 192*****
*****3600 IN A*****
***** 3600 IN *****
*****. 3600 IN A*****
*****m. 3600 IN*****
*****. 3600 IN A*****
*****com. 3600 I*****
*****om. 3600 IN *****
*****n.com. 3600 *****
*****com. 1200 I*****
*****om. 1200 IN *****
*****om. 1200 IN *****
*****n.com. 1200 *****
*****in.com. 1200*****
*****m. 86400 IN *****
*****om. 86400 IN*****
*****com. 86400 IN*****
*****n.com. 86400 *****
*****pin.com. 86400*****
*****opin.com. 8640*****
*****m. 86400 IN *****
*****. 86400 IN A *****
*****com. 86400 IN*****
*****om. 3600 IN *****
*****com. 3600 IN*****
*****in.com. 3600*****
*****1200 IN A*****
***** 86400 IN A*****
***** 1200 IN A*****
***** 86400 IN A *****
*****86400 IN A *****
*****com. 300 IN*****
*****om. 1200 IN *****
*****. 86400 IN *****
*****. 3600 IN *****
*****. 86400 IN *****
*****3600 IN A *****
*****om. 3600 IN*****
*****m. 1200 IN A*****
*****86400 IN A *****
*****1200 IN A *****
*****om. 3600 IN*****
*****m. 3600 IN *****
*****om. 3600 IN *****
*****1200 IN A *****
***** 3600 IN *****
***** 3600 IN A*****
*****200 IN A 2*****
***** 86400 IN *****
***** 3600 IN A*****
***** 86400 IN *****
*****. 86400 IN A *****
***** 3600 IN *****
*****AME cgbchina.zhao*****
*****com. 3600 I*****
*****AME cgdc.zhaopi*****
*****86400 IN A *****
*****86400 IN A*****
*****com. 86400 IN*****
*****. 1200 IN *****
*****. 86400 IN A*****
*****om. 3600 IN *****
***** IN CNAME beij*****
*****IN CNAME beiji*****
***** IN CNAME beij*****
*****IN CNAME beiji*****
*****com. 3600 I*****
***** IN CNAME bei*****
*****. 3600 IN A*****
*****. 86400 IN A*****
*****.com. 3600 I*****
*****om. 3600 IN*****
***** 1200 IN A *****
*****m. 3600 IN*****
***** 86400 IN A*****
*****com. 1200 IN*****
*****m. 86400 IN *****
*****. 86400 IN A*****
*****om. 3600 IN*****

23
chinamobile-campus.zhaopin.com.

mask 区域
*****	59.1*****
*****com. 3600 I*****
*****.com. 3600 I*****
*****n.com. 3600 *****
*****.com. 3600 I*****
*****.com. 3600 I*****
*****.com. 3600 I*****
*****n.com. 3600 I*****
*****CNAME he.chinamobile2*****
*****n.com. 3600 *****
*****pin.com. 3600*****
*****n.com. 3600 I*****
*****in.com. 3600 *****
*****opin.com. 3600*****
*****n.com. 1200 I*****
*****om. 3600 IN *****
*****com. 3600 IN*****
*****.com. 3600 I*****
*****m. 3600 IN *****
*****com. 3600 I*****
*****om. 3600 IN *****
*****om. 3600 IN *****
*****om. 3600 IN *****
*****om. 3600 IN *****
*****om. 3600 IN *****
*****om. 86400 IN*****
*****com. 86400 IN*****
*****. 86400 IN A *****
*****com. 86400 IN*****
*****.com. 3600 I*****
*****. 3600 IN *****
*****m. 1200 IN *****
*****com. 3600 I*****
*****om. 86400 IN*****
*****n.com. 3600 *****
*****n.com. 1200 *****
*****opin.com. 3600*****
*****aopin.com. 360*****
*****haopin.com. 36*****
*****com. 86400 IN*****
*****AME chinatelecom2015.*****
*****com. 86400 I*****
*****n.com. 3600 I*****
*****. 86400 IN A*****
*****. 86400 IN A*****
*****com. 86400 I*****
*****.com. 86400 I*****
*****com. 86400 I*****
*****m. 86400 IN *****
*****om. 86400 IN*****
*****AME chinaunicom2015.*****
*****om. 86400 IN*****
*****om. 1200 IN *****
*****m. 86400 IN*****
*****3600 IN A*****
*****m. 3600 IN*****
*****3600 IN A *****
*****1200 IN A*****
***** IN CNAME beij*****
*****. 3600 IN *****
***** 3600 IN *****
*****3600 IN A *****
*****m. 3600 IN*****
*****1200 IN A *****
*****. 86400 IN *****
*****400 IN A 19*****
*****3600 IN A*****
***** 3600 IN *****
*****m. 3600 IN*****
*****. 3600 IN A*****
*****3600 IN A *****
*****m. 3600 IN*****
*****. 3600 IN A*****
*****com. 3600 I*****
*****. 3600 IN *****
*****6400 IN A 2*****
***** 3600 IN A 2*****
*****600 IN A 2*****
*****1200 IN A *****
*****86400 IN A *****
*****. 86400 IN A*****
*****. 1200 IN A*****
*****. 86400 IN *****
*****m. 1200 IN *****
*****m. 86400 IN *****
*****. 1200 IN A*****
*****com. 86400 I*****
*****00 IN A 19*****
*****00 IN A 192*****
***** IN CNAME cm*****
*****200 IN CNAME*****
*****com. 3600 IN *****
*****400 IN A 5*****
*****86400 IN A*****
***** 86400 IN *****
*****. 86400 IN *****
*****.com. 1200 I*****
*****. 86400 IN A*****
*****. 3600 IN *****
*****. 86400 IN A*****
*****AME sd.cmcc2015.zh*****
***** 3600 IN A*****
*****com. 86400 IN*****
***** 3600 IN *****
***** 86400 IN *****
*****86400 IN A *****
*****86400 IN A *****
***** 3600 IN *****
*****3600 IN A *****
*****. 3600 IN A*****
*****com. 86400 I*****
*****m. 3600 IN*****
*****00 IN A 21*****
*****IN NS lns1.z*****
***** 3600 IN *****
*****200 IN A 2*****
*****00 IN A 21*****
*****1200 IN A 2*****
*****. 3600 IN *****
*****om. 3600 IN *****
*****com. 3600 IN*****
*****n.com. 3600 I*****
*****m. 3600 IN A*****
*****n.com. 1200 *****
*****6400 IN A *****
*****. 86400 IN A*****
***** 86400 IN A*****
***** 3600 IN *****
*****3600 IN A *****
*****AME company.zhao*****
*****m. 1200 IN *****
*****m. 3600 IN *****
*****600 IN A 21*****
***** 1200 IN A 1*****
*****. 3600 IN *****
*****n.com. 86400 *****
*****86400 IN A *****
*****00 IN A 22*****
*****. 1200 IN *****
*****86400 IN A *****
*****400 IN A 5*****
*****6400 IN A *****
*****. 3600 IN *****
*****m. 3600 IN*****
*****m. 3600 IN*****
*****3600 IN A *****
*****. 86400 IN *****
***** 3600 IN *****
*****AME job.cr-power.zh*****
*****3600 IN A*****
*****400 IN A 5*****
*****00 IN NS lns1*****
*****86400 IN A *****


mask 区域
*****400	IN	A	5*****
*****00 IN A 19*****
*****om. 3600 IN*****
*****3600 IN A *****
*****400 IN A 5*****
*****00 IN A 21*****
*****00 IN A 21*****
*****. 1200 IN A*****
*****86400 IN A *****
*****. 1200 IN A*****
*****om. 1200 IN*****
*****m. 3600 IN *****
*****200 IN A 21*****
*****. 1200 IN *****
*****. 3600 IN *****
*****. 1200 IN *****
*****. 3600 IN *****
*****6400 IN A *****
*****6400 IN A *****
*****m. 3600 IN*****
*****. 3600 IN A*****
*****com. 3600 I*****
*****3600 IN A*****
*****3600 IN A*****
*****. 3600 IN *****
*****00 IN A 211*****
*****400 IN A 21*****
*****400 IN A 21*****
*****m. 3600 IN*****
*****om. 3600 IN *****
*****00 IN A 21*****
*****m. 3600 IN*****
***** 1200 IN A*****
*****com. 3600 IN*****
*****IN CNAME beij*****
*****86400 IN A *****
*****IN CNAME beij*****
***** IN NS bb1dns1*****
***** IN NS bb1dns2*****
*****com. 1200 IN*****
*****. 3600 IN A*****
*****400 IN A 5*****
*****3600 IN A*****
*****aopin.com. 360*****
*****3600 IN A*****
***** 1200 IN *****
*****600 IN A 1*****
*****ME deppon.zhaopi*****
*****. 3600 IN *****
*****om. 3600 IN*****
*****. 1200 IN A*****
*****600 IN A 19*****
*****. 3600 IN A*****
*****86400 IN A *****
***** 1200 IN A *****
***** 3600 IN A *****
***** 3600 IN *****
*****1200 IN A*****
*****. 3600 IN *****
***** 86400 IN A*****
*****. 1200 IN *****
*****ME dilian.zhaopi*****
*****com. 3600 I*****
***** 86400 IN A*****
***** 3600 IN *****
*****00 IN A 21*****
*****600 IN A 5*****
*****600 IN A 5*****
*****600 IN A 5*****
*****600 IN A 5*****
*****m. 3600 IN *****
*****IN CNAME beiji*****
***** 3600 IN A*****
*****m. 3600 IN*****
*****00 IN A 19*****
*****00 IN A 10*****
*****200 IN CNAME*****
*****3600 IN A*****
*****86400 IN A*****
***** 86400 IN A*****
*****3600 IN A*****
*****00 IN A 21*****
*****600 IN A 21*****
*****300 IN A *****
*****m. 300 IN A*****
***** 86400 IN A *****
*****600 IN A 19*****
*****3600 IN A*****
***** 3600 IN A *****
*****1200 IN A*****
***** 1200 IN A 2*****
*****600 IN A 1*****
***** 86400 IN *****
*****86400 IN A*****
*****3600 IN A *****
*****.com. 1200 I*****
*****.com. 1200 I*****
*****400 IN A 5*****
*****86400 IN A *****
*****86400 IN A *****
*****86400 IN A*****
*****. 86400 IN *****
*****NAME epics.zhao*****
*****200 IN A 2*****
***** 3600 IN A *****
*****3600 IN A *****
*****400 IN A 1*****
*****00 IN A 21*****
***** 3600 IN A*****
*****. 1200 IN *****
*****00 IN A 19*****
*****m. 1200 IN A*****
*****400 IN A 1*****
*****. 3600 IN *****
*****m. 86400 IN*****
*****. 86400 IN A*****
*****. 86400 IN A*****
*****m. 86400 IN *****
***** 1200 IN A*****
*****6400 IN A *****
*****. 86400 IN *****
*****600 IN A 19*****
*****m. 3600 IN *****
*****600 IN A *****
***** 1200 IN *****
*****. 3600 IN *****
*****. 1200 IN A*****
*****. 3600 IN A*****
*****. 3600 IN *****
*****m. 3600 IN *****
*****om. 3600 IN*****
*****com. 3600 IN*****
*****. 1200 IN *****
*****com. 1200 I*****
*****om. 1200 IN *****
*****. 1200 IN A*****
***** 3600 IN A*****
*****86400 IN A*****
*****. 86400 IN A*****
***** 86400 IN A*****
*****. 86400 IN *****
***** 86400 IN *****
*****m. 3600 IN *****
*****m. 1200 IN A*****
*****m. 86400 IN*****
*****in.com. 3600*****
*****in.com. 1200*****
*****.com. 86400 I*****
*****86400 IN A *****
*****1200 IN A 1*****
*****86400 IN A *****
*****. 86400 IN A*****
*****. 3600 IN A*****
*****m. 3600 IN *****
*****com. 3600 IN*****
*****3600 IN A *****
***** 1200 IN *****
*****1200 IN A *****
*****IN CNAME beij*****
*****. 3600 IN *****
*****pin.com. 3600*****
*****3600 IN A*****
*****pin.com. 1200*****
*****om. 3600 IN *****
*****. 3600 IN A *****
*****om. 3600 IN A*****
*****00 IN A 192*****
*****400 IN A 5*****
***** 86400 IN A*****
***** 3600 IN A*****
*****com. 1200 IN*****
*****IN CNAME beij*****
***** 86400 IN *****
***** 3600 IN *****
***** 86400 IN A*****
***** IN CNAME bei*****
*****com. 86400 I*****
*****6400 IN A *****
***** 86400 IN *****
*****6400 IN A *****
*****. 3600 IN *****
*****NAME gdcsg.zhao*****
*****AME gdlt.zhaopi*****
*****6400 IN A 21*****
*****6400 IN A *****
*****86400 IN A*****
*****86400 IN A*****
*****. 86400 IN A*****
*****. 3600 IN A*****
*****. 1200 IN *****
*****3600 IN A*****
*****200 IN A 5*****
*****86400 IN A*****
*****. 3600 IN *****
*****opin.com. 3600*****
*****. 1200 IN *****
***** 3600 IN *****
*****3600 IN A*****
*****om. 3600 IN*****
*****com. 3600 I*****
*****.com. 3600 I*****
*****200 IN A 1*****
*****m. 86400 IN*****
*****om. 3600 IN*****
***** 3600 IN *****
*****86400 IN A *****
*****3600 IN A *****
***** 3600 IN A*****
*****m. 3600 IN *****
*****om. 3600 IN*****
*****600 IN A 5*****
*****86400 IN A *****
*****.com. 3600 I*****
*****. 3600 IN A*****
*****m. 3600 IN *****
*****om. 3600 IN *****
*****com. 3600 I*****
***** 3600 IN *****
*****. 3600 IN *****
*****m. 3600 IN*****
*****om. 3600 IN*****
***** 86400 IN A*****
*****IN CNAME stude*****
*****m. 86400 IN*****
*****3600 IN A*****


mask 区域
*****om. 86400 IN*****
*****. 86400 IN *****
*****m. 86400 IN*****
*****. 1200 IN A*****
***** 1200 IN *****
*****om. 3600 IN*****
***** IN CNAME beij*****
***** IN CNAME bei*****
***** 86400 IN *****
*****om. 3600 IN*****
*****600 IN A 5*****
*****om. 86400 IN*****
***** 3600 IN A*****
*****00 IN A 192*****
*****86400 IN A *****
*****NAME gzgdj.zhao*****
*****3600 IN A *****
***** 3600 IN A*****
*****m. 3600 IN *****
*****86400 IN A *****
***** 3600 IN *****
*****1200 IN A*****
*****. 3600 IN *****
***** 86400 IN A*****
*****IN CNAME beij*****
*****IN CNAME beiji*****
***** 3600 IN A*****
*****m. 86400 IN*****
*****om. 1200 IN*****
*****. 3600 IN *****
*****om. 3600 IN*****
*****com. 3600 I*****
*****n.com. 3600 *****
*****IN CNAME beij*****
*****. 86400 IN A*****
*****600 IN A 5*****
***** 86400 IN *****
*****m. 86400 IN*****
*****00 IN A 19*****
*****6400 IN A 1*****
*****6400 IN A 1*****
*****. 86400 IN A *****
*****6400 IN A 1*****
*****6400 IN A 19*****
*****6400 IN A 1*****
*****6400 IN A 1*****
*****6400 IN A 1*****
*****6400 IN A 1*****
*****6400 IN A 1*****
*****6400 IN A 1*****
*****6400 IN A *****
*****6400 IN A *****
*****86400 IN A*****
*****400 IN A 1*****
*****com. 1200 I*****
*****N CNAME beiji*****
*****com. 3600 I*****
*****m. 86400 IN *****
*****m. 86400 IN *****
***** 86400 IN *****
*****IN CNAME beij*****
***** 3600 IN A*****
*****3600 IN A*****
***** IN CNAME c*****
*****m. 86400 IN*****
*****. 86400 IN A*****
*****m. 86400 IN *****
*****. 1200 IN *****
***** 3600 IN A *****
*****com. 3600 I*****
*****m. 86400 IN *****
*****400 IN A 2*****
*****m. 1200 IN*****
***** 3600 IN A *****
*****6400 IN A 21*****
*****3600 IN A *****
*****AME hnltzp.zhaop*****
*****3600 IN A *****
***** 3600 IN *****
*****. 3600 IN A*****
*****om. 1200 IN *****
*****om. 86400 IN*****
*****m. 3600 IN*****
*****6400 IN A 19*****
***** 3600 IN *****
*****m. 3600 IN A*****
*****.com. 3600 I*****
*****200 IN A 5*****
*****0 IN A 211*****
*****3600 IN A *****
*****. 3600 IN *****
*****3600 IN A*****
*****. 1200 IN A*****
*****3600 IN A *****
*****6400 IN A *****
*****.com. 3600 I*****
*****m. 1200 IN *****
*****com. 86400 IN*****
*****com. 86400 IN*****
*****6400 IN A *****
*****AME huaxing.zhao*****
*****. 3600 IN *****
*****1200 IN A *****
***** IN CNAME bei*****
***** 3600 IN A*****
*****3600 IN A*****
*****m. 3600 IN *****
*****m. 3600 IN*****
*****3600 IN A *****
*****. 3600 IN A*****
***** 3600 IN A*****
*****. 3600 IN *****
*****m. 3600 IN *****
*****3600 IN A *****
***** 3600 IN A*****
*****. 3600 IN A*****
*****6400 IN A *****
*****3600 IN A *****
*****. 86400 IN A*****
*****. 1200 IN *****
*****200 IN A *****
***** 1200 IN A*****
*****m. 3600 IN *****
*****om. 3600 IN*****
*****com. 3600 IN*****
*****AME images.zhao*****
*****. 1200 IN *****
*****ME img00.zhaopi*****
*****ME img01.zhaopi*****
*****ME img02.zhaopi*****
*****ME img03.zhaopi*****
*****ME img04.zhaopi*****
*****ME img05.zhaopi*****
*****ME img06.zhaopi*****
*****ME img07.zhaopi*****
*****ME img08.zhaopi*****
*****ME img09.zhaopi*****
*****00 IN A 211*****
*****00 IN A 21*****
*****3600 IN A *****
***** 3600 IN A*****
*****m. 3600 IN *****
*****200 IN A 2*****
*****6400 IN A 21*****
*****haopin.com. 864*****
*****3600 IN A *****
***** 3600 IN A*****
*****3600 IN A *****
*****. 3600 IN A*****
*****. 3600 IN A*****
*****m. 3600 IN *****
***** 1200 IN A *****
*****. 1200 IN A*****
*****3600 IN A 21*****
***** 1200 IN A *****
*****. 300 IN A *****
*****6400 IN A 2*****
*****om. 3600 IN *****


invoicetest.zhaopin.com. 3600 IN

mask 区域
*****68.1*****
*****1200 IN A *****
*****AME zhaopin.in*****
*****m. 3600 IN *****
*****m. 1200 IN *****
*****1200 IN A*****
*****86400 IN A *****
*****om. 3600 IN *****
*****m. 3600 IN *****
*****m. 1200 IN *****
*****400 IN A 5*****
*****om. 86400 IN*****
*****400 IN A 5*****
***** 3600 IN *****
*****. 3600 IN *****
*****m. 3600 IN*****
*****om. 3600 IN*****
*****. 3600 IN A*****
*****m. 3600 IN *****
*****om. 3600 IN *****
*****. 3600 IN A*****
*****m. 3600 IN *****
*****om. 3600 IN *****
*****m. 3600 IN *****
*****om. 3600 IN*****
*****com. 3600 IN*****
*****m. 3600 IN*****
*****om. 3600 IN*****
*****com. 3600 I*****
*****.com. 3600 I*****
*****. 3600 IN A*****
*****m. 3600 IN *****
*****om. 3600 IN *****
*****n.com. 3600 I*****
*****IN CNAME beiji*****
***** IN CNAME bei*****
*****3600 IN A*****
*****. 3600 IN *****
*****. 1200 IN *****
***** IN CNAME bei*****
*****N CNAME beiji*****
*****N CNAME beiji*****
*****1200 IN A *****
*****1200 IN A *****
*****. 3600 IN A*****
*****. 3600 IN A*****
*****. 86400 IN *****
*****com. 1200 I*****
*****86400 IN A *****
***** 3600 IN A *****
*****400 IN A 21*****
*****86400 IN A 2*****
*****m. 3600 IN*****
*****400 IN A 5*****
*****00 IN A 192*****
***** 3600 IN A*****
*****6400 IN A 2*****
*****m. 86400 IN*****
*****m. 1200 IN A*****
*****0 IN A 211.*****
*****. 3600 IN A*****
*****m. 1200 IN*****
*****. 1200 IN A*****
*****ME jobsgg.zhaopi*****
***** 3600 IN A*****
*****. 3600 IN *****
***** 1200 IN A*****
*****. 1200 IN *****
*****86400 IN A *****
*****3600 IN A *****
*****3600 IN A *****
*****. 3600 IN A *****
***** 3600 IN *****
***** 1200 IN A *****
*****00 IN NS lns1.*****
***** IN NS lns1.z*****
*****0 IN NS lns1.*****
***** 3600 IN A*****
*****6400 IN A 2*****
*****3600 IN A*****
*****om. 1200 IN*****
*****6400 IN A *****
***** 1200 IN A*****
*****. 86400 IN *****
*****1200 IN A *****
*****com. 300 IN *****
*****600 IN A 19*****
*****1200 IN A*****
*****3600 IN A 2*****
*****. 1200 IN *****
*****400 IN A 19*****
*****m. 86400 IN *****
*****com. 3600 I*****
*****. 3600 IN A*****
*****m. 3600 IN *****
*****in.com. 3600*****
*****om. 3600 IN*****
*****.com. 3600 I*****
***** 86400 IN *****
*****NAME kugou.zhao*****
***** IN CNAME bei*****
*****. 3600 IN *****
***** IN A 211.*****
***** IN A 211.*****
*****opin.com. 360*****
*****. 3600 IN *****
***** IN CNAME bei*****
*****m. 300 IN *****
*****6400 IN A *****
*****6400 IN A 2*****
*****m. 3600 IN*****
*****. 86400 IN A*****
*****m. 1200 IN*****
***** 86400 IN A*****
*****m. 86400 IN *****
*****om. 86400 IN*****


lenovoadmin.zhaopin.com. 3600 IN A

mask 区域
*****1.5*****
***** 86400 IN A*****
*****. 86400 IN *****
*****m. 86400 IN *****
*****.com. 3600 IN*****
***** 3600 IN *****
*****m. 3600 IN *****
*****m. 3600 IN*****
*****6400 IN A *****
*****200 IN A 19*****
*****com. 86400 IN*****
*****com. 1200 IN*****
*****. 86400 IN A*****
***** 86400 IN *****
*****com. 3600 I*****
*****. 3600 IN *****
***** 3600 IN A*****
***** IN MX 10 trac*****
*****N CNAME beiji*****
*****0 IN MX 10 2*****
*****1200 IN A *****
*****. 3600 IN *****
***** 3600 IN *****
*****m. 86400 IN *****
*****m. 86400 IN *****
*****00 IN A 211*****
*****. 1200 IN A*****
*****3600 IN A *****
***** IN NS lns1.z*****
***** IN CNAME bei*****
*****. 3600 IN *****
*****m. 1200 IN *****
***** 3600 IN *****
*****om. 3600 IN*****
*****6400 IN A 2*****
***** 3600 IN *****
*****0 IN A 211*****
*****86400 IN A*****
*****N MX 10 mx.ma*****
*****t;v=spf1 include:z*****
*****pin.com. 8640*****

v=DKIM1\;p=MIGfMA0GCSqGSIb3DQEBAQUAA4GNADCBiQKBgQDkk/qsYwWYwx2GAVdNxsdMExTYhUV31k5g+a5VudmDZ/Flgj3z9+sjWWezra8NX5GHOBRrfSa2DK6LUM/9LLBdL2hZ6pkNU+7FQWrNXYLsqZ9JQasdPl+XuHQVbBy2t8DiTCgAisZy3kmjS9+pD7RmB+6vZ7U0J2xJ/qugyNhVSQIDAQAB"
C350relay.mail.zhaopin.com. 86400

mask 区域
*****168.1*****
*****com. 86400 IN*****
*****com. 86400 I*****
*****. 86400 IN A*****
*****m. 3600 IN A*****
*****m. 3600 IN A*****
*****m. 3600 IN A*****
*****m. 3600 IN A*****
*****m. 3600 IN A*****
*****m. 3600 IN A*****
*****m. 3600 IN A*****
*****m. 3600 IN A*****
*****. 3600 IN A *****
*****. 3600 IN A *****
*****. 3600 IN A *****
*****. 3600 IN A *****
*****. 3600 IN A *****
*****. 3600 IN A *****
*****. 3600 IN A *****
*****. 3600 IN A *****
*****0 IN MX 10 2*****
*****00 IN A 211*****
*****0 IN MX 10 2*****
*****00 IN A 211*****
*****IN MX 10 mx.m*****
*****;v=spf1 include:zha*****
*****1k5g+a5VudmDZ/Flgj3z9+sjWWezra8NX5GHOBRrfSa2DK6LUM/9LLBdL2hZ6pkNU+7*****
*****. 86400 IN A *****
*****. 86400 IN A *****
*****. 86400 IN A *****
*****. 86400 IN A *****
*****. 86400 IN A *****
*****. 86400 IN A *****
*****IN MX 10 mx.m*****
*****;v=spf1 include:zha*****
*****1k5g+a5VudmDZ/Flgj3z9+sjWWezra8NX5GHOBRrfSa2DK6LUM/9LLBdL2hZ6pkNU+7*****
*****. 86400 IN A *****
*****. 86400 IN A *****
*****. 86400 IN A *****
*****. 86400 IN A *****
*****. 86400 IN A *****
*****. 86400 IN A *****
*****6400 IN A 1*****
***** IN CNAME bei*****
*****200 IN A 21*****
*****. 3600 IN *****
*****m. 3600 IN*****
*****om. 3600 IN*****
*****com. 3600 I*****
*****400 IN A 19*****
*****1200 IN A *****
*****. 3600 IN A*****
*****m. 3600 IN *****
*****com. 3600 IN*****
***** IN CNAME bei*****
*****86400 IN A*****
*****m. 3600 IN*****
*****00 IN A 21*****
*****86400 IN A *****
*****IN CNAME beiji*****
*****86400 IN A*****
*****3600 IN A *****
*****. 3600 IN A*****
*****om. 3600 IN *****
***** 1200 IN A *****
***** 86400 IN A*****
*****m. 86400 IN*****
*****6400 IN A 1*****
*****com. 3600 IN*****
*****3600 IN A*****
*****3600 IN A*****
***** 1200 IN A *****
*****om. 1200 IN A*****
*****6400 IN A 19*****
*****3600 IN A*****
*****. 86400 IN A*****
*****400 IN A 2*****
***** 3600 IN *****
*****. 86400 IN *****
*****86400 IN A*****
*****400 IN A 18*****
*****600 IN A *****
***** 3600 IN A*****
*****3600 IN A *****
*****m. 3600 IN *****
***** 3600 IN A*****
*****3000 IN A *****
*****. 86400 IN A*****
***** 3600 IN A *****
*****om. 3600 IN *****
*****. 3600 IN A*****
*****IN CNAME beiji*****
*****IN CNAME beiji*****
***** IN CNAME bei*****
***** IN CNAME bei*****
***** IN CNAME bei*****
*****200 IN A 5*****
***** 3600 IN A*****
*****400 IN A 19*****
*****6400 IN A *****
*****00 IN A 192*****
*****6400 IN A *****
*****com. 1200 I*****
*****m. 1200 IN *****
*****m. 86400 IN *****
***** 86400 IN *****
*****3600 IN A*****
*****IN CNAME beij*****
*****.com. 3600 I*****
*****n.com. 3600 *****
*****pin.com. 3600*****
*****00 IN A 192*****
*****200 IN A 19*****
*****. 3600 IN *****
*****m. 3600 IN*****
***** 1200 IN A *****
*****.com. 3600 I*****
*****. 86400 IN *****
*****com. 86400 I*****
*****3600 IN A*****
*****3600 IN A*****
***** 86400 IN *****
***** 3600 IN A*****
*****0 IN A 211*****
*****. 3600 IN A*****
*****m. 3600 IN *****
*****com. 3600 IN*****
*****3600 IN A*****
*****3600 IN A *****
*****0 IN A 211*****
*****. 3600 IN *****
*****. 3600 IN *****
*****86400 IN A *****
*****86400 IN A *****
*****6400 IN CNAME*****
*****400 IN A 5*****
*****400 IN A 21*****
*****86400 IN A*****
*****300 IN A 2*****
*****1200 IN A *****
*****om. 3600 IN*****
*****com. 3600 IN*****
***** 1200 IN A*****
*****86400 IN A*****
*****com. 1200 I*****
*****200 IN A 2*****
*****1200 IN A 1*****
***** 86400 IN A*****
*****00 IN A 21*****
*****. 1200 IN *****
*****00 IN A 211*****
*****. 1200 IN *****
*****00 IN A 10*****
*****. 3600 IN A*****
*****. 86400 IN *****
***** 3600 IN A*****
*****3600 IN A*****
***** 3600 IN *****
*****. 3600 IN *****
***** 3600 IN A*****
***** 3600 IN A*****
***** 3600 IN A*****
*****. 3600 IN A*****
*****86400 IN A*****
*****om. 3600 IN*****
*****m. 3600 IN A*****
***** 1800 IN *****


pop.zhaopin.com. 3600 IN A

mask 区域
*****9.4*****
*****1200 IN A *****

powercdn.zhaopin.com. 86400 IN CNAME powercdn-zhaopin-com.powercdn.cn.
powerlong.zhaopin.com.

mask 区域
*****sk>59.1*****
*****3600 IN A *****
*****m. 3600 IN*****
*****. 3600 IN *****
*****m. 3600 IN*****
*****om. 3600 IN*****
*****com. 3600 I*****
*****.com. 3600 I*****
*****m. 1200 IN*****
*****om. 1200 IN *****
*****m. 1200 IN *****
***** 86400 IN A*****
*****om. 86400 I*****


psbc2014sz.zhaopin.com. 86400 IN CNAME psbc2014sz.zhaopin.com.fastcdn.com.
psbc2015.zhaopin.com. 86400 IN A

mask 区域
*****1.5*****
*****. 86400 IN A*****
*****86400 IN A *****
*****86400 IN A *****
***** 86400 IN *****
***** 3600 IN A 2*****
***** 3600 IN A*****
*****m. 86400 IN *****
*****00 IN A 21*****
*****00 IN A 19*****
***** 86400 IN *****
***** IN CNAME bei*****
*****IN CNAME beiji*****
*****00 IN CNAME be*****
*****m. 3600 IN A*****
***** 86400 IN A*****
*****IN CNAME beiji*****
*****6400 IN A *****
*****86400 IN A *****
*****00 IN A 21*****
*****m. 3600 IN *****
*****. 3600 IN *****
*****. 3600 IN *****
*****. 3600 IN *****
*****00 IN A 21*****
***** 3600 IN A*****
***** 3600 IN A*****
***** 3600 IN A*****
*****00 IN A 19*****
***** 1200 IN A *****
***** 3600 IN A*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
***** 3600 IN A 5*****
*****. 3600 IN A*****
*****. 3600 IN A*****
*****. 3600 IN A*****
*****. 3600 IN A*****
*****. 3600 IN A*****
*****. 3600 IN A*****


m55.relay.zhaopin.com. 3600 IN A

mask 区域
*****.21*****
*****. 3600 IN A*****
*****. 3600 IN A*****
*****. 3600 IN A*****
*****. 3600 IN A*****
*****. 3600 IN A*****
*****. 3600 IN A*****
*****. 3600 IN A*****
***** 3600 IN A 5*****
*****. 3600 IN A *****
*****. 3600 IN A *****
*****. 3600 IN A *****
*****om. 3600 IN*****


mail2.relay.zhaopin.com. 3600 IN A 5*.**.**.53
mail2.relay.zhaopin.com. 3600 IN A 5*.**.**83

漏洞证明:

mask 区域
**********

3.来几张后台管理图look,look。
手机应用平台:

AF8FE7A6-3793-4C00-B223-C30AF13B8070.png


智联招聘:

C6255B0C-72A2-426D-ACAD-FDE78CE9CCF7.png


厂商招聘地址:

403CBC7B-3C27-4D02-8FB0-0F9ACED0F9EA.png


77154BB5-27B0-4FCE-B5C2-98F6FF00A2F6.png


D54B3070-43CA-460C-A81A-426884FCE290.png

修复方案:

allow-transfer {ipaddress;}; 通过ip限制可进行域传送的服务器
allow-transfer { key transfer; }; 通过key限制可进行域传送的服务器

版权声明:转载请注明来源 小r00to1@乌云


漏洞回应

厂商回应:

危害等级:高

漏洞Rank:12

确认时间:2015-02-07 21:25

厂商回复:

感谢你对智联招聘安全的关注 漏洞已修复。

最新状态:

暂无


漏洞评价:

评论

  1. 2015-02-06 22:39 | 麻辣烫 ( 路人 | Rank:27 漏洞数:10 | wooyun是一个学习的好地方.)

    dig @ns8.zhaopin.com axfr zhaopin.comdig @ns9.zhaopin.com axfr zhaopin.com

  2. 2015-02-06 23:20 | 小r00to1 ( 普通白帽子 | Rank:138 漏洞数:42 )

    貌似修复了,好快啊。。。

  3. 2015-02-06 23:34 | caspar ( 路人 | Rank:7 漏洞数:10 | ^_^)

    这次修复的很快嘛

  4. 2015-02-07 01:04 | 孤独雪狼 ( 普通白帽子 | Rank:710 漏洞数:145 | 七夕手机被偷,这坑爹的七夕啊 。。。。)

    求一份IP段

  5. 2015-02-07 10:17 | 子非海绵宝宝 认证白帽子 ( 核心白帽子 | Rank:1044 漏洞数:106 | 发扬海绵宝宝的精神!你不是海绵宝宝,你怎...)

    来一份!!!

  6. 2015-02-07 11:11 | 刘海哥 ( 普通白帽子 | Rank:114 漏洞数:28 | 索要联系方式但不送礼物的厂商定义为无良厂...)

    速度快成这样!来一份!!!

  7. 2015-02-08 18:08 | 路人N ( 路人 | Rank:12 漏洞数:8 )

    fierce --dns zhaopin.comFound 73 entries.