> For the complete documentation index, see [llms.txt](https://hacking-notes.jord4n.pro/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://hacking-notes.jord4n.pro/zh/web/business-logic/inconsistent-handling-of-exceptional-input.md).
# 对异常输入的不一致处理
对异常输入的不一致处理，PortSwigger Web Security Academy 实验笔记，包括利用流程、载荷测试、Burp Suite 验证以及修复上下文。
### 异常输入的不一致处理
**实验描述**
该实验室展示了在注册过程中对用户输入验证不足。这个逻辑缺陷允许访问通常仅限员工使用的管理功能。/ 目的：访问管理面板并删除用户 **carlos**.
**初步观察**
在注册时，会向所提供的地址发送一封验证电子邮件。/ 操作服务器接收与该域及其子域关联的\*\*所有电子邮件\*\*：
```bash
@exploit-0a8c00a504628ac58246f51601c6009c.exploit-server.net
```
因此，使用该域或其子域创建的任何地址都可被接受。
**已识别异常行为**
通过创建一个在 `@` 符号之前包含大量字符的电子邮件地址，我们发现字段\*\*
{% code overflow="wrap" %}
```bash
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA@exploit-0a8c00a504628ac58246f51601c6009c.exploit-server.net
```
{% endcode %}
这个限制导致实际存储的值与显示或用于安全检查的值之间出现不一致。
**故障的运作方式**
目标是强制发生截断，使注册的电子邮件最终正好以 `dontwannacry.com` 信任区域。
长度验证：
{% code overflow="wrap" %}
```bash
eecho -n "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA@dontwannacry.com" | wc -c
```
{% endcode %}
一旦达到255个字符，最终地址就会以这种方式构造：
{% code overflow="wrap" %}
```bash
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA@dontwannacry.com.exploit-0a8c00a504628ac58246f51601c6009c.exploit-server.net
```
{% endcode %}
操作服务器能够正常接收该邮件，因为它接受所有子域。
应用程序在截断后，将该地址解释为属于 `dontwannacry.com` 该域。
该账户被视为内部账户或可信账户。/ 一旦连接，即可访问 **管理面板** 而无需额外控制。
---
# Agent Instructions
This documentation is published with GitBook. GitBook is the documentation platform designed so that both humans and AI agents can read, navigate, and reason over technical content effectively. Learn more at gitbook.com.
## Querying This Documentation
If you need additional information that is not directly available in this page, you can query the documentation by asking a question.
Perform an HTTP GET request on the following URL with the `ask` and `goal` query parameters:
```
GET https://hacking-notes.jord4n.pro/zh/web/business-logic/inconsistent-handling-of-exceptional-input.md?ask=&goal=
```
`ask` is the immediate question: it should be specific, self-contained, and written in natural language.
`goal` is what the user is ultimately trying to achieve, the reason they need the answer. Sharing it helps GitBook give you a better, more relevant answer. A goal is most helpful when it describes the outcome the user wants rather than restating the question. For example, with `ask=how do I create an API token`, a goal like `automate deployments from our CI pipeline` lets GitBook tailor the answer to that use case.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.
Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.
