TDOA_RCE:通达OA综合利用工具-源码

上传者: 42170064 | 上传时间: 2021-09-02 16:50:46 | 文件大小: 30KB | 文件类型: ZIP
工具说明 通达OA综合利用工具_20210224 集成POC如下 任意用户登录POC:4个SQL注入POC:2个后台文件上传POC:3个本地文件包含POC:2个前台文件上传POC(非WEB目录):1个任意文件删除POC:1个 工具面板截图 工具利用流程 1.优先利用本地文件包含漏洞 原因是本地文件包含漏洞,配合前台文件上传可以直接getshell,无需获取有效Cookie 2.如果本地文件包含漏洞利用失败,则可以利用任意用户登录漏洞与SQL注入漏洞 这两个突破的利用方式集成在了“获取Cookie”按钮上共计6个POC,其中任意一个POC利用成功的都会自动停止,并自动填充有效的Cookie到工具上获取有效的Cookie后,可以选择后台文件发布一键利用如目标存在弱密码,可手动填充有效Cookie后配合文件上传一键利用 3.特定版本v11.6存在任意文件删除漏洞的利用 当目标为v11.6版本时,

文件下载

资源详情

[{"title":"( 21 个子文件 30KB ) TDOA_RCE:通达OA综合利用工具-源码","children":[{"title":"TDOA_RCE-master","children":[{"title":"README.md <span style='color:#111;'> 1.63KB </span>","children":null,"spread":false},{"title":"src","children":[{"title":"auth.inc.php <span style='color:#111;'> 7.84KB </span>","children":null,"spread":false},{"title":"META-INF","children":[{"title":"MANIFEST.MF <span style='color:#111;'> 55B </span>","children":null,"spread":false}],"spread":true},{"title":"com","children":[{"title":"xinyu","children":[{"title":"poc","children":[{"title":"ArbitraryUserLogin.java <span style='color:#111;'> 4.71KB </span>","children":null,"spread":false},{"title":"LocalFileIncludes.java <span style='color:#111;'> 2.15KB </span>","children":null,"spread":false},{"title":"SQLInjection.java <span style='color:#111;'> 2.49KB </span>","children":null,"spread":false},{"title":"ArbitraryFileDeletion.java <span style='color:#111;'> 2.04KB </span>","children":null,"spread":false},{"title":"GetShell.java <span style='color:#111;'> 10.17KB </span>","children":null,"spread":false}],"spread":true},{"title":"view","children":[{"title":"Main.java <span style='color:#111;'> 167B </span>","children":null,"spread":false},{"title":"TDOAFrame.java <span style='color:#111;'> 2.38KB </span>","children":null,"spread":false},{"title":"GetCookieActionListener.java <span style='color:#111;'> 2.68KB </span>","children":null,"spread":false},{"title":"GetShellActionListener.java <span style='color:#111;'> 3.74KB </span>","children":null,"spread":false}],"spread":true},{"title":"tools","children":[{"title":"Request.java <span style='color:#111;'> 7.36KB </span>","children":null,"spread":false},{"title":"Other.java <span style='color:#111;'> 930B </span>","children":null,"spread":false},{"title":"Response.java <span style='color:#111;'> 784B </span>","children":null,"spread":false}],"spread":true}],"spread":true}],"spread":true}],"spread":true},{"title":".idea","children":[{"title":"uiDesigner.xml <span style='color:#111;'> 8.59KB </span>","children":null,"spread":false},{"title":"workspace.xml <span style='color:#111;'> 11.94KB </span>","children":null,"spread":false},{"title":"misc.xml <span style='color:#111;'> 273B </span>","children":null,"spread":false},{"title":"modules.xml <span style='color:#111;'> 256B </span>","children":null,"spread":false},{"title":"artifacts","children":[{"title":"TDOA_RCE_jar.xml <span style='color:#111;'> 286B </span>","children":null,"spread":false}],"spread":true},{"title":"codeStyles","children":[{"title":"codeStyleConfig.xml <span style='color:#111;'> 149B </span>","children":null,"spread":false}],"spread":true}],"spread":true}],"spread":true}],"spread":true}]

评论信息

  • shaben :
    亏了亏了亏了亏了
    2021-11-23
  • qq_45080780 :
    用户下载后在一定时间内未进行评价,系统默认好评。
    2021-08-16

免责申明

【只为小站】的资源来自网友分享,仅供学习研究,请务必在下载后24小时内给予删除,不得用于其他任何用途,否则后果自负。基于互联网的特殊性,【只为小站】 无法对用户传输的作品、信息、内容的权属或合法性、合规性、真实性、科学性、完整权、有效性等进行实质审查;无论 【只为小站】 经营者是否已进行审查,用户均应自行承担因其传输的作品、信息、内容而可能或已经产生的侵权或权属纠纷等法律责任。
本站所有资源不代表本站的观点或立场,基于网友分享,根据中国法律《信息网络传播权保护条例》第二十二条之规定,若资源存在侵权或相关问题请联系本站客服人员,zhiweidada#qq.com,请把#换成@,本站将给予最大的支持与配合,做到及时反馈和处理。关于更多版权及免责申明参见 版权及免责申明