通达OA任意文件上传配合文件包含导致的RCE

# 通达OA任意文件上传配合文件包含导致的RCE

影响版本：
– V11版
– 2015-2017版
– 2013版
– 2013增强版

exp
“`
eg: python3 .py http://10.0.0.1:81 whoami
“`

[@小杰尼](https://mp.weixin.qq.com/s?__biz=MzIzNzk1NTU0Mw==&mid=2247484362&idx=1&sn=35d9acc6dabbe96a09774fb3888cd32d&chksm=e8c1f372dfb67a64d1e5a370b0804fd3ed52bb7c2f5d8458d094a887d76d24e727a58fbc6419&mpshare=1&scene=1&srcid=&sharer_sharetime=1584503663458&sharer_shareid=a4152ce92dc7dd63d1756d7060bf90a7&key=844c91e610caa57a87c6cea3e98e20806f05b1892418b2f98af81cbb8f7a9cc934ba8a37300009ef8a8468b556c0bcd7ec85f67d09cc14327052a31d6051a83f2376f4d7e2a2f9eb038b6639fb73ed5d&ascene=1&uin=MzE4NzEwMDI0Nw%3D%3D&devicetype=Windows+10&version=62080079&lang=zh_CN&exportkey=A6EiWJcsWjGQOHWtCr8xo9w%3D&pass_ticket=2gNU8ouXcPqTOCfiNimiI7HmvpJRvM98frNYP594AACIJtg4SuY4g0L3fyGIwn1f)
[@jas502n](https://github.com/jas502n/OA-tongda-RCE)

[点我下载](/Gr33kLibrary/download_tool/98/)