<em id="ddznf"></em>

<form id="ddznf"></form>
<noframes id="ddznf">

    
    

        技術干貨 > 文章詳情

        6種常見web漏洞坑

        柳絮飄飄_joan2年前

        邏輯漏洞挖掘一直是安全測試中“經久不衰”的話題。相比SQL注入、XSS漏洞等傳統安全漏洞,現在的攻擊者更傾向于利用業務邏輯層的應用安全問題,這類問題往往危害巨大,可能造成了企業的資產損失和名譽受損,并且傳統的安全防御設備和措施收效甚微。今天漏洞盒子安全研究團隊就與大家分享Web安全測試中邏輯漏洞的挖掘經驗。

        漏洞一:訂單金額任意修改

        解析

        很多中小型的購物網站都存在這個漏洞。在提交訂單的時候抓取數據包或者直接修改前端代碼,然后對訂單的金額任意修改。

        如下圖所示:

        222.png
















        333.png

        經常見到的參數大多為rmb、value、amount、cash、fee、money

          關于支付的邏輯漏洞這一塊還有很多種思路,比如相同價格增加訂單數量,相同訂單數量減少產品價格,訂單價格設定為負數等等。

        預防思路

        1.訂單需要多重效驗,如下圖所演示

        444.png



        2. 訂單數值較大時需要人工審核訂單信息,如下圖所演示。



        555.png

















        3. 以上只是提到兩個非常簡單的預防思路,第二個甚至還有一些不足之處。這里需要根據業務環境的不同總結出自己的預防方式,最好咨詢專門的網絡安全公司。

        漏洞二:驗證碼回傳

        解析

          這個漏洞主要是發生在前端驗證處,并且經常發生的位置在于:賬號密碼找回、賬號注冊、支付訂單等,驗證碼主要發送途徑為郵件、短信。其運行機制如下圖所示:

        6.png














        黑客只需要抓取Response數據包便知道驗證碼是多少。

        漏洞三.未進行登陸憑證驗證

        解析

        有些業務的接口,因為缺少了對用戶的登陸憑證的效驗或者是驗證存在缺陷,導致黑客可以未經授權訪問這些敏感信息甚至是越權操作。

        常見案例:

        1. 某電商后臺主頁面,直接在管理員web路徑后面輸入main.php之類的即可進入。

        666.png

        2. 某航空公司訂單ID枚舉

        888.png


















        漏洞四:接口無限制枚舉

        解析有些關鍵性的接口因為沒有做驗證或者其它預防機制,容易遭到枚舉攻擊。

        常見案例:1.某電商登陸接口無驗證導致撞庫



        99.png












        2. 某招聘網驗證碼無限制枚舉


        858585.png














        漏洞五:cookie設計存在缺陷

        解析

        這里需要對其詳細的說一下。我們先一個一個來吧。

        Cookie的效驗值過于簡單。有些web對于cookie的生成過于單一或者簡單,導致黑客可以對cookie的效驗值進行一個枚舉,如下圖所示:




        6757.png

























          根據上圖,我們可以分析出,這家網站對于cookie的效驗只單純的采用了一組數字,并且數值為常量,不會改變,這樣非常容易遭到黑客的枚舉。甚至有一些網站做的更簡單,直接以用戶名,郵箱號或者用戶ID等來作為cookie的判斷標準。

        漏洞六:找回密碼存在設計缺陷

        解析

        1.auth設計缺陷

          經常研究邏輯漏洞的人可能會對以下URL很熟悉  www.xxx.com/resetpassword.php?id=MD5

         用戶修改密碼時,郵箱中會收到一個含有auth的鏈接,在有效期內用戶點擊鏈接,即可進入重置密碼環節。而大部分網站對于auth的生成都是采用rand()函數,那么這里就存在一個問了,Windows環境下rand()最大值為32768,所以這個auth的值是可以被枚舉的。如下面這個代碼可以對auth的值做一個字典。

        999.png

        然后重置某個賬號,并且對重置鏈接內的auth進行枚舉

        000.png









        2.對response做驗證

          這個漏洞經常出現在APP中,其主要原因是對于重置密碼的的驗證是看response數據包,由于之前的案例沒有截圖,只能畫個流程圖給大家演示一下。


        858586666.png













        總結

        以上見到的只是幾個比較經典的和常見的邏輯漏洞,這些邏輯漏洞也是程序開發人員和安全檢測人員需要留意的。



        版權保護聲明:本文轉自ArthurKiller@漏洞盒子安全研究團隊,本文僅代表作者觀點,麥子學院可能會進行刪節修改,但不代表麥子學院的官方立場。我們極其尊重并保護原創作品的版權,若原作者有任何疑問,請聯系微信號:chengxuyuan8



















        1

        登錄 后參與討論

        沒有更多評論了

        免費領取價值1888元求職寶典!

        客服熱線 400-862-8862

        回到頂部

        916官方彩票 www.5091a.com | www.109ak.com | www.775377.com | www.54400b.com | www.yy63.com | www.49956v.com | www.810629.com | www.39500hh.com | www.619939.com | www.54400y.com | www.844689.com | www.679by.com | www.78700m.com | www.fh7577.com | www.50788y.com | www.082706.com | www.qml0.com | www.361gc.com | www.336766.com | www.kc67.com | www.917gc.com | www.750966.com | www.36787j.com | www.135842.com | www.957999.com | www.34788r.com | www.356686.com | www.636309.com | www.xinyc3.com | www.lu126.com | www.55228a.com | www.030628.com | www.662182.com | www.hczx7.com | www.60007g.com | www.81678i.com | www.xinyc8.com | www.544094.com | www.bxcp3.com | www.220v.cc | www.061wy.com | www.tj92.com | www.910355.com | www.071wy.com | www.918ar.com | www.50788w.com | www.335037.com | www.258768.com | www.550154.com | www.xinyc3.com | www.hx1113.com | www.918li.com | www.912480.com | www.949498.com | www.763526.com | www.725102.com | www.c6883.com | www.c4532.com | www.33112s.com | www.3890p.com | www.09gcw.com | www.9fk.com | www.862422.com | www.431056.com | www.661023.com | www.318548.com | www.560103.com | www.178389.com | www.41518o.com | www.5522z.cc | www.927150.com | www.550304.com | www.109883.com | www.16878r.com | www.80065g.com | www.80075k.com | www.99jtc.com | www.810895.com | www.301667.com | www.23636n.com | www.5095p.com | www.03czj.com | www.yc7701.com | www.80767k.com | www.35918s.com | www.662by.com | www.745568.com | www.117035.com | www.50054z.com | www.5666hc.com | www.521787.com | www.26163g.com | www.66ffn.com | www.544086.com | www.43818k.com | www.21czj.com | www.391411.com | www.50064a.com | www.hjin4.com | www.178752.com | www.68682k.com | www.50732h.com | www.jx68.com | www.51515t.com | www.dqz7.com | www.84499j.com | www.2109d.com | www.489800.com | www.50989h.com | www.653750.com | www.83993c.com | www.901573.com | www.68689t.com | www.hx6691.com | www.90305c.com | www.656zf.com | www.055976.com | www.126kc.com | www.339219.com | www.062wy.com | www.296380.com | www.3478n.cc | www.390500.com | www.857t.com | www.50026k.com | www.909361.com | www.55228g.com | www.592771.com | www.41518h.com | www.767397.com | www.36788m.com | www.399190.com | www.068wy.com | www.62118b.com | www.737298.com | www.60007k.com | www.343577.com | www.ya909.com | www.33997v.com | www.hm3999.com | www.36788n.com | www.672766.com | www.39500g.com | www.265990.com | www.hy6936.com | www.39500m.com | www.530961.com | www.8000hc.com | www.55885l.com | www.574277.com | www.3479p.com | www.95222w.com | www.665771.com | www.23040.com | www.00840f.com | www.348689.com | www.937787.com | www.59901.com | www.451117.com | www.962095.com | www.2934a.com | www.50064z.com | www.399150.com | www.975367.com | www.1111y.cc | www.26878t.com | www.51331d.com | www.230320.com | www.901372.com | www.2875q.com | www.66332c.com | www.399150.com | www.739366.com | www.hycb8.com | www.99yfa.com | www.33588d.com | www.41518h.com | www.035989.com | www.lcw199.com | www.533660.com | www.706515.com | www.932312.com | www.le53.com | www.981500.com | www.84499z.com | www.33112j.com | www.50989k.com | www.77801j.com | www.001837.com | www.234265.com | www.331277.com | www.346411.com | www.364277.com | www.314877.com | www.582909.com | www.574277.com | www.guocai667.com | www.hcw266.com | www.598411.com | www.769526.com | www.810620.com | www.820933.com | www.713667.com | www.685053.com | www.685948.com | www.622230.com | www.556742.com | www.505420.com | www.196807.com | www.89894j.com | www.52072s.com | www.65707t.com | www.9149k.com | www.53537.cc | www.c71.cc | www.805462.com | www.547099.com | www.197802.com | www.51331j.com | www.29277n.com | www.109ak.com | www.783309.com | www.355294.com | www.89894w.com | www.81678l.com | www.99343.cc | www.3890u.com | www.w058.com | www.399957.com | www.50074j.com | www.53539.cc | www.915196.com | www.480840.com | www.66652e.com | www.16878p.com | www.fcyl0.com | www.569380.com | www.142525.cc | www.78949c.com | www.022ah.cc | www.606370.com | www.80767a.com | www.56717.com | www.907118.com | www.055168.cc | www.66730.cc | www.560692.com | www.71399b.com | www.fh7557.com | www.569829.com | www.08588u.com | www.55ckb.com | www.533292.com | www.99788r.com | www.qilc3.com | www.501274.com | www.99638p.com | www.gyfc2.com | www.162090.com | www.00840q.com | www.635850.com | www.35155a.com | www.hy6931.com | www.068627.com | www.5522n.cc | www.378017.com | www.50052x.com | www.754880.com | www.07163a.com | www.912055.com | www.66653k.com | www.c1456.com | www.53900i.com | www.ybao4.com | www.082706.com | www.66ffq.com | www.015990.com | www.hy6262.com | www.52072n.com | www.895010.com | www.77803s.com | www.700539.com | www.49956w.com | www.330691.com | www.095wy.com | www.68568h.com | www.914077.com | www.86267l.com | www.584211.com | www.022xj.cc | www.43131w.com | www.706515.com | www.9149p.com | www.068671.com | www.901591.com | www.32123t.com | www.223075.com | www.cszb9.com | www.77803l.com | www.424770.com | www.sjgc3.com | www.95999w.com | www.3991.cc | www.330291.com | www.xcn1.com | www.2632c.com | www.75538d.com | www.599546.com | www.9889hc.com | www.88266q.com | www.338996.com | www.878466.com | www.cll168.com | www.26878o.com | www.263520.com | www.755874.com | www.03gcw.com | www.12455m.com | www.98528e.com | www.535059.com | www.hcw332.com | www.6969a.cc | www.68689t.com | www.105636.com | www.684244.com | www.hf5883.com | www.5091x.com | www.89894y.com | www.083065.com | www.504733.com | www.655902.com | www.c5638.com | www.5666hc.com | www.16878d.com | www.15355q.com | www.86267e.com | www.320663.com | www.591017.com | www.871203.com | www.ascp0.com | www.60fr.com | www.jx68.com | www.cp3158.cc | www.zuan222.com | www.1555hc.com | www.5522y.cc | www.022gz.cc | www.rrle9.com | www.ya190.com | www.699by.com | www.076wy.com | www.bxcp3.com | www.078wy.com | www.1555hc.com | www.yi816.com | www.jx68.com | www.956458.com | www.939623.com | www.781566.com | www.701487.com | www.669537.com | www.551475.com | www.401345.com | www.319989.com | www.175131.com | www.168212.com | www.96386k.com | www.60007c.com | www.80075z.com | www.35155s.com | www.cll168.com | www.fh1188.com | www.983699.com | www.609816.com | www.271051.com | www.76520c.com | www.68689n.com | www.5109.cc | www.974090.com | www.649677.com | www.368158.com | www.81678i.com | www.77803p.com | www.081wy.com | www.820335.com | www.343277.com | www.55885l.com | www.12455j.com | www.1wcp.com | www.541619.com | www.83033o.com | www.36788w.com | www.58uh.com | www.342177.com | www.52072y.com | www.9205e.com | www.938527.com | www.330732.com | www.81520z.com | www.66clf.com | www.503662.com | www.32123v.com | www.055y.cc | www.665881.com | www.65707e.com | www.544bb.cc | www.342077.com | www.50788k.com | www.916025.com | www.088185.com | www.3890y.com | www.550637.com | www.34788x.com | www.a450.com | www.fh7557.com | www.2350m.com | www.609716.com | www.15355e.com | www.cp3136.com | www.78700d.com | www.bxcp3.com | www.332709.com | www.98599.cc | www.540377.com | www.41518k.com | www.638262.com | www.51331c.com | www.626212.com | www.68689n.com | www.730678.com | www.77801p.com | www.808912.com | www.81520g.com | www.621431.com | www.35155d.com | www.581477.com | www.77802l.com | www.634679.com | www.15355z.com | www.384077.com | www.5522z.cc | www.91233u.com | www.hf0688.com | www.43818b.com | www.687198.com | www.35918h.com | www.357256.com | www.588yc.com | www.62118b.com | www.771219.com | www.9356g.com | www.150935.com | www.cp67.cc | www.61655p.com | www.xinyc5.com | www.cp8001.cc | www.80065r.com | www.338053.com | www.caim5.com | www.68689n.com | www.335240.com | www.cai002.vip | www.97171.cc | www.60108u.com | www.557089.com | www.a450.com | www.34736.com | www.bxcp3.com | www.613069.com | www.xcn6.com | www.43818.com | www.68568x.com | www.560231.com | www.ch8567.com | www.8667l.com | www.50024f.com | www.197560.com | www.612918.com | www.hx1112.com | www.2875o.com | www.89894r.com | www.038909.com | www.634679.com | www.c6378.com | www.5095x.com | www.97655b.com | www.83033d.com | www.342918.com | www.684050.com | www.996732.com | www.1035aa.com | www.49956w.com | www.06500w.com | www.68682o.com | www.203882.com | www.373500.com | www.700626.com | www.914901.com | www.cpkk.com | www.cpkk7.com | www.22dwj.com | www.055v.cc | www.cll168.com | www.36787c.com | www.71233j.com | www.96386w.com | www.08588n.com | www.12455r.com | www.96386n.com | www.83993x.com | www.91233k.com | www.87668c.com | www.81520g.com | www.60108k.com | www.35155x.com | www.34489.cc | www.104ak.com | www.071wy.com | www.5xcv.com | www.xinyc4.com | www.671566.com | www.560935.com | www.376163.com | www.186372.com | www.88266i.com | www.68689y.com | www.07163d.com | www.32123g.com | www.3126v.com | www.le53.com | www.806375.com | www.djcp234.com | www.244689.com | www.77803v.com | www.86267s.com | www.5484d.com | www.slyl2.com | www.826925.com | www.452816.com | www.78949z.com | www.61655p.com | www.371l.cc | www.hcw332.com | www.483770.com | www.78700m.com | www.50732c.com | www.11qxc.com | www.707602.com | www.xinyc8.com | www.80065d.com | www.073wy.com | www.665879.com | www.91233o.com | www.35155s.com | www.hx6697.com | www.xcw866.com | www.26878o.com | www.555hy.cc | www.562509.com | www.53900c.com | www.2373r.com | www.98528f.com | www.81233b.com | www.33112l.com | www.858899.com | www.035079.com | www.9149f.com | www.813770.com | www.163136.com | www.15236.cc | www.644996.com | www.50080b.com | www.47d.cc | www.347277.com | www.43818k.com | www.812830.com | www.66376o.com | www.6hcczz.com | www.257630.com | www.cll168.com | www.602475.com | www.29178b.com | www.hy6933.com | www.001837.com | www.093wy.com | www.176012.com | www.917gc.com | www.351089.com | www.5854j.cc | www.338053.com | www.6364g.com | www.361929.com | www.7782d.com | www.351817.com | www.3933h.cc | www.178532.com | www.060wy.com | www.87668k.com | www.hy2522.com | www.50054c.com | www.814646.com | www.60123k.com | www.560231.com | www.3668t.com | www.303476.com | www.99jtb.com | www.66376t.com | www.936250.com | www.77114q.com | www.541611.com | www.288hc.com | www.91233q.com | www.897296.com | www.50024x.com | www.330627.com | www.hx5577.com | www.75538b.com | www.339132.com | www.ybao2.com | www.78700d.com | www.330687.com | www.ch8345.com | www.52072p.com | www.137916.com | www.820585.com | www.5095i.com | www.68682w.com | www.609710.com | www.ywzuqiu.com | www.73166h.com | www.163910.com | www.771745.com | www.055i.cc | www.00840y.com | www.235387.com | www.809216.com | www.669by.com | www.68568t.com | www.196909.com | www.634977.com | www.sxyl6.com | www.18005.com | www.41518k.com | www.195876.com | www.fh7557.com | www.5xci.com | www.9149i.com | www.00665g.com | www.83033m.com | www.354977.com | www.691063.com | www.cb2988.com | www.9889hc.com | www.92092.cc | www.61233q.com | www.50054k.com | www.106316.com | www.lcw997.com | www.621341.com | www.717699.com | www.cb7188.com | www.7dzh.com | www.8000hc.com | www.3479e.com | www.16878j.com | www.66332c.com | www.89894r.com | www.26299d.com | www.77996e.com | www.88266b.com | www.030628.com | www.109076.com | www.348499.com | www.377653.com | www.444070.com | www.422727.com | www.550284.com | www.507381.com | www.526093.com | www.397730.com | www.986399.com | www.263988.com | www.178075.com | www.053069.com | www.80767m.com | www.50732d.com | www.29277o.com | www.67258c.com | www.57022.cc | www.535hc.com | www.fh3399.com | www.c1336.com | www.ct6678.com | www.938901.com | www.689477.com | www.508533.com | www.186793.com | www.61655m.com | www.08588i.com | www.07163y.com | www.588yc.com | www.aj3383.com | www.715121.com | www.375967.com | www.068672.com | www.33588y.com | www.43818b.com | www.bxcp3.com | www.865657.com | www.591023.com | www.138037.com | www.26878t.com | www.9478p.com | www.coz5.com | www.585065.com | www.015990.com | www.66653m.com | www.bxcp3.com | www.791637.com | www.339786.com | www.33112r.com | www.2934n.com | www.980221.com | www.hcw332.com | www.26878h.com | www.022fj.cc | www.589196.com | www.68568w.com | www.750966.com | www.819770.com | www.100202.com | www.21202n.com | www.910424.com | www.127356.com | www.26163g.com | www.988917.com | www.xinyc2.com | www.36166l.com | www.986282.com | www.youxin9.cc | www.9155f.com | www.657666.com | www.35918y.com | www.003ac.com | www.338061.com | www.33997y.com | www.814646.com | www.50788r.com | www.dao70.com | www.wcp666888.com | www.07163w.com | www.679822.com | www.29178f.com | www.987581.com | www.81678i.com | www.76wcp.com | www.220875.com | www.3668m.com | www.504033.com | www.33588h.com | www.613069.com | www.52303k.com | www.58gc8.com | www.77210g.com | www.hcw018.com | www.66653r.com | www.715025.com | www.65707c.com | www.652982.com | www.36166h.com | www.550437.com | www.5688y.cc | www.187152.com | www.35wcp.com | www.78700h.com | www.ct8811.com | www.33112l.com | www.690802.com | www.32123n.com | www.377675.com | www.8000hc.com | www.95555w.com | www.937816.com | www.76520z.com | www.503433.com | www.126kc.com | www.68689n.com | www.848266.com | www.32123j.com | www.xinyc8.com | www.cb3188.com | www.62118c.com | www.303481.com | www.hh3890.com | www.66621j.com | www.523780.com | www.qmkl7.com | www.80065p.com | www.yc7701.com | www.rcw8844.com | www.35155f.com | www.111307.com | www.zuan222.com | www.2350g.com | www.43818w.com | www.489800.com | www.hm3222.com | www.26878c.com | www.106096.com | www.638262.com | www.5xct.com | www.29277w.com | www.77801u.com | www.621481.com | www.gyfc0.com | www.26299s.com | www.68568u.com | www.504833.com | www.959552.com | www.1035g.com | www.79520d.com | www.84499u.com | www.592909.com | www.977657.com | www.2109p.com | www.55885h.com | www.66653p.com | www.338052.com | www.685044.com | www.hw4444.com | www.cll168.com | www.52303h.com | www.39500n.com | www.037211.com | www.390366.com | www.652982.com | www.976291.com | www.66ffz.com | www.3416d.com | www.41518m.com | www.21202v.com | www.66652b.com | www.076591.com | www.318187.com | www.514077.com | www.695037.com | www.864355.com | www.975961.com | www.hy6939.com | www.5zxz.com | www.99fc.cc | www.016ac.com | www.022t.cc | www.2875r.com | www.0014m.com | www.2500o.com | www.2632v.com | www.3126z.com | www.2875c.com | www.2934o.com | www.1555hc.com | www.3136.com | www.88ttz.com | www.fl96.com | www.318548.com | www.978257.com | www.cp8002.cc | www.927633.com | www.909935.com | www.768299.com | www.638806.com | www.528335.com | www.300388.com | www.062566.com | www.65707a.com | www.12455q.com | www.49956f.com | www.781566.com | www.068wy.com | www.rcw8866.com | www.768399.com | www.544669.com | www.262771.com | www.77801s.com | www.00840r.com | www.89980.cc | www.bxcp3.com | www.960737.com | www.605733.com | www.lcw199.com | www.49956u.com | www.33112.com | www.sxyl0.com | www.701574.com | www.308680.com | www.50054t.com | www.07163p.com | www.gyfc4.com | www.599845.com | www.068627.com | www.66653p.com | www.522.cc | www.wcp686.com | www.bxcp3.com | www.49956j.com | www.rrle4.com | www.549810.com | www.66653e.com | www.9356k.com | www.916570.com | www.298396.com | www.80767t.com | www.ya238.com | www.621316.com | www.66376b.com | www.2688cai.com | www.652776.com | www.68682e.com | www.2632t.com | www.593500.com | www.49956x.com | www.664by.com | www.508869.com | www.99099hh.com | www.ybao9.com | www.345576.com | www.55885n.com | www.912063.com | www.020724.com | www.2408a.cc | www.544091.com | www.79520b.com | www.927633.com | www.80065l.com | www.9889hc.com | www.330175.com | www.33068.cc | www.560702.com | www.68568z.com | www.820585.com | www.33112o.com | www.290282.com | www.61655f.com | www.23040.com | www.085366.com | www.669by.com | www.202434.com | www.2632s.com | www.330865.com | www.6661a.cc | www.302830.com | www.1158c.com | www.215463.com | www.8000hc.com | www.162090.com | www.088wy.com | www.91233p.com | www.hjin9.com | www.66332k.com | www.942677.com | www.16878o.com | www.676065.com | www.26163y.com | www.526609.com | www.1368v.cc | www.022173.com | www.978315.com | www.77802r.com | www.547577.com | www.622by.com | www.84499w.com | www.912482.com | www.66621d.com | www.369061.com | www.08czj.com | www.50054z.com | www.638806.com | www.0014q.com | www.65707x.com | www.657630.com | www.1368p.cc | www.52072q.com | www.629021.com | www.371j.cc | www.35918f.com | www.509265.com | www.czg7.com | www.77114q.com | www.xinyc2.com | www.900406.com | www.81699.cc | www.84499r.com | www.672766.com | www.66ffz.com | www.71233r.com | www.186327.com | www.770001.com | www.535hc.com | www.97655z.com | www.196507.com | www.806292.com | www.099wy.com | www.60007d.com | www.031059.com | www.582062.com | www.hx1165.com | www.cll168.com | www.29277m.com | www.163025.com | www.596081.com | www.am7588.com | www.1368r.cc | www.50732t.com | www.66332y.com | www.275073.com | www.622307.com | www.xinyc3.com | www.078wy.com | www.36788d.com | www.32123h.com | www.81520w.com | www.271696.com | www.552432.com | www.818807.com | www.c9662.com | www.588yc.com | www.9818a.cc | www.55228k.com | www.29277n.com | www.66332n.com | www.068673.com | www.xinyc5.com | www.375939.com | www.550194.com | www.xcw866.com | www.767884.com | www.wcp666888.com | www.c1350.com | www.qbwc1.com | www.085wy.com | www.917gc.com | www.2408d.cc | www.3416g.com | www.5086d.com | www.6611a.cc | www.34736.com | www.9478o.com | www.9149a.com | www.6364n.com | www.3005x.com | www.676zf.com | www.699by.com | www.09xyc.com | www.ck09.com | www.hm7288.com | www.957999.com | www.893023.com | www.808399.com | www.luck887.com | www.530877.com | www.327477.com | www.126309.com | www.71399g.com | www.29277f.com | www.55228j.com | www.5091h.com | www.81gcw.com | www.c134.vip | www.710650.com | www.475711.com | www.132031.com | www.52072s.com | www.61655n.com | www.2350p.com | www.qucw.com | www.rcw8855.com | www.444215.com | www.84499r.com | www.73166b.com | www.022n.cc |