{"id":4119,"date":"2026-01-16T15:43:42","date_gmt":"2026-01-16T07:43:42","guid":{"rendered":"https:\/\/blog.billows.com.tw\/?p=4119"},"modified":"2026-01-16T15:43:42","modified_gmt":"2026-01-16T07:43:42","slug":"globalprotect-%e9%ab%98%e9%a2%a8%e9%9a%aa%e6%bc%8f%e6%b4%9e%e4%bf%ae%e8%a3%9c%ef%bc%9apoc-%e5%b7%b2%e6%9b%9d%e5%85%89%ef%bc%8c%e9%98%b2%e7%81%ab%e7%89%86%e5%ae%89%e5%85%a8%e5%91%8a%e6%80%a5","status":"publish","type":"post","link":"https:\/\/blog.billows.com.tw\/?p=4119","title":{"rendered":"GlobalProtect \u9ad8\u98a8\u96aa\u6f0f\u6d1e\u4fee\u88dc\uff1aPoC \u5df2\u66dd\u5149\uff0c\u9632\u706b\u7246\u5b89\u5168\u544a\u6025"},"content":{"rendered":"\n
\"\"<\/figure>\n\n\n\n

\u8fd1\u671f\uff0c\u8cc7\u5b89\u516c\u53f8Palo Alto Networks <\/a>\u4fee\u88dc\u4e86\u5f71\u97ff GlobalProtect Gateway <\/strong>\u8207 Portal<\/strong> \u7684\u9ad8\u98a8\u96aa\u6f0f\u6d1e\uff08CVE-2026-0227<\/a>\uff0cCVSS 7.7\uff09\uff0c\u8a72\u6f0f\u6d1e\u5df2\u6709\u516c\u958b PoC<\/strong>\uff08Proof-of-Concept<\/strong>\uff09<\/strong> \u53ef\u5229\u7528\u3002GlobalProtect \u662f Palo Alto Networks \u63d0\u4f9b\u7684 VPN \u8207\u5b89\u5168\u9060\u7aef\u5b58\u53d6\u89e3\u6c7a\u65b9\u6848\uff0c\u53ef\u900f\u904e Palo Alto \u9632\u706b\u7246\u5c07\u4f7f\u7528\u8005\u6d41\u91cf\u5c0e\u5165\u4f01\u696d\u7db2\u8def\uff0c\u4e26\u5957\u7528\u8207\u5167\u90e8\u7db2\u8def\u76f8\u540c\u7684\u5b89\u5168\u63a7\u7ba1\u3002<\/p>\n\n\n\n

\u6f0f\u6d1e\u6982\u8ff0<\/strong><\/p>\n\n\n\n

\u6b64\u6b21\u6f0f\u6d1e\u5f71\u97ff PAN-OS<\/strong> \u7cfb\u7d71\uff0c\u5141\u8a31\u653b\u64ca\u8005\u5728 \u7121\u9700\u8a8d\u8b49<\/strong> \u7684\u60c5\u6cc1\u4e0b\u5c0d\u9632\u706b\u7246\u767c\u52d5\u62d2\u7d55\u670d\u52d9\uff08DoS\uff09\u653b\u64ca\u3002\u5b98\u65b9\u516c\u544a\u6307\u51fa\uff1a<\/p>\n\n\n\n

\u300cPAN-OS \u8edf\u9ad4\u5b58\u5728\u6f0f\u6d1e\uff0c\u53ef\u80fd\u8b93\u672a\u7d93\u6388\u6b0a\u7684\u653b\u64ca\u8005\u9020\u6210\u9632\u706b\u7246\u62d2\u7d55\u670d\u52d9\u3002\u91cd\u8907\u89f8\u767c\u6b64\u6f0f\u6d1e\u53ef\u80fd\u5c0e\u81f4\u9632\u706b\u7246\u9032\u5165\u7dad\u8b77\u6a21\u5f0f\u3002\u300d<\/p>\n\n\n\n

\u653b\u64ca\u8005\u82e5\u91cd\u8907\u5229\u7528\u6b64\u6f0f\u6d1e\uff0c\u53ef\u5c07\u9632\u706b\u7246\u5f37\u5236\u7f6e\u5165\u7dad\u8b77\u6a21\u5f0f\uff0c\u4f7f\u7db2\u8def\u6d41\u91cf\u4e2d\u65b7\uff0c\u4e26\u66ab\u6642\u55aa\u5931\u9632\u706b\u7246\u4fdd\u8b77\uff0c\u76f4\u81f3\u7ba1\u7406\u54e1\u624b\u52d5\u5e72\u9810\u3002<\/p>\n\n\n\n

\u53d7\u5f71\u97ff\u7248\u672c<\/strong><\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

\u8cc7\u5b89\u5ee0\u5546\u5f37\u8abf\uff0c\u6b64\u6f0f\u6d1e\u50c5\u5f71\u97ff\u5df2\u555f\u7528 GlobalProtect Gateway <\/strong>\u6216 Portal<\/strong> \u7684 PAN-OS \u6216 Prisma Access \u74b0\u5883\uff1bCloud NGFW <\/strong>\u4e0d\u53d7\u5f71\u97ff<\/strong>\u3002\u622a\u81f3\u76ee\u524d\uff0cPalo Alto Networks \u5c1a\u672a\u767c\u73fe\u8a72\u6f0f\u6d1e\u5728\u5be6\u969b\u653b\u64ca\u4e2d\u88ab\u6feb\u7528\u7684\u6848\u4f8b\u3002<\/p>\n\n\n\n

\u5c08\u5bb6\u89c0\u9ede\u8207\u5efa\u8b70<\/strong><\/p>\n\n\n\n

    \n
  1. \u7acb\u5373\u6aa2\u67e5\u8207\u5347\u7d1a<\/strong>\uff1a\u53d7\u5f71\u97ff\u7684\u4f01\u696d\u61c9\u7acb\u5373\u6aa2\u67e5\u9632\u706b\u7246\u7248\u672c\uff0c\u4e26\u76e1\u5feb\u5347\u7d1a\u81f3\u5b98\u65b9\u4fee\u88dc\u7248\u672c\uff0c\u4ee5\u964d\u4f4e\u88ab PoC \u653b\u64ca\u5229\u7528\u7684\u98a8\u96aa\u3002<\/li>\n\n\n\n
  2. \u76e3\u63a7\u7570\u5e38\u884c\u70ba<\/strong>\uff1a\u52a0\u5f37\u5c0d\u9632\u706b\u7246\u9032\u5165\u7dad\u8b77\u6a21\u5f0f\u3001\u7570\u5e38\u91cd\u555f\u6216\u7db2\u8def\u6d41\u91cf\u4e2d\u65b7\u7684\u76e3\u63a7\uff0c\u907f\u514d\u672a\u6388\u6b0a\u4e2d\u65b7\u670d\u52d9\u5f71\u97ff\u71df\u904b\u3002<\/li>\n\n\n\n
  3. \u5f37\u5316\u9060\u7aef\u5b58\u53d6\u5b89\u5168<\/strong>\uff1a\u9664\u4e86\u66f4\u65b0\u9632\u706b\u7246\uff0c\u5efa\u8b70\u6aa2\u8996 VPN \u767b\u5165\u7b56\u7565\u3001\u9650\u5236\u7121\u7528\u7684\u9060\u7aef\u8a2a\u554f\uff0c\u4ee5\u53ca\u5b9a\u671f\u5be9\u67e5\u4f7f\u7528\u8005\u6b0a\u9650\u3002<\/li>\n\n\n\n
  4. \u8ffd\u8e64\u5a01\u8105\u60c5\u8cc7<\/strong>\uff1a\u8003\u91cf\u8fd1\u671f\u91dd\u5c0d GlobalProtect \u767b\u5165\u7684\u653b\u64ca\u6d3b\u52d5\uff08\u81ea 2025\u5e7412\u6708\u521d\u8d77\uff0c\u99ed\u5ba2\u9396\u5b9a GlobalProtect \u767b\u5165\u8207 SonicWall API \u6383\u63cf\uff09\uff0c\u4f01\u696d\u61c9\u6574\u5408\u5a01\u8105\u60c5\u8cc7\uff0c\u4ee5\u5feb\u901f\u8fa8\u8b58\u53ef\u7591\u884c\u70ba\u3002<\/li>\n<\/ol>\n\n\n\n

    \u7e3d\u7d50\u4f86\u8aaa\uff0c\u9019\u6b21\u6f0f\u6d1e\u96d6\u672a\u6709\u5927\u898f\u6a21\u653b\u64ca\u5831\u544a\uff0c\u4f46 PoC <\/strong>\u5df2\u516c\u958b<\/strong>\uff0c\u5c0d\u4f01\u696d\u7db2\u8def\u5b89\u5168\u4ecd\u69cb\u6210\u5be6\u8cea\u5a01\u8105\u3002\u5efa\u8b70\u4f01\u696d\u7ba1\u7406\u5c64\u8207\u8cc7\u5b89\u5718\u968a\u7acb\u5373\u63a1\u53d6\u884c\u52d5\uff0c\u78ba\u4fdd\u9632\u706b\u7246\u8207 VPN \u5b89\u5168\u4e0d\u53d7\u5a01\u8105\u3002<\/p>\n\n\n\n

    <\/p>\n","protected":false},"excerpt":{"rendered":"

    \u8fd1\u671f\uff0c\u8cc7\u5b89\u516c\u53f8Palo Alto Networks \u4fee\u88dc\u4e86\u5f71\u97ff GlobalProtect Gateway \u8207 READ MORE<\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6],"tags":[174],"class_list":["post-4119","post","type-post","status-publish","format-standard","hentry","category-6","tag-news"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/4119","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4119"}],"version-history":[{"count":1,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/4119\/revisions"}],"predecessor-version":[{"id":4122,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=\/wp\/v2\/posts\/4119\/revisions\/4122"}],"wp:attachment":[{"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4119"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4119"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.billows.com.tw\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4119"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}