Coder Social home page Coder Social logo

tongdaoatool's Introduction

通达OA漏洞利用工具v1.6

免责声明：请勿从事非法测试，利用此工具而造成的任何直接或者间接的后果及损失，均由使用者本人负责，所产生的一切不良后果与作者无关。该仅供安全人员用于授权测试，请勿非法使用！！！

本工具webshell采用蚁剑连接，密码均为x

注意：通达OA v11.6前台任意文件删除+任意文件上传漏洞会删除auth.inc.php，这可能会损坏OA系统谨慎操作

集成常见通达OA漏洞，总计42个漏洞

身份认证绕过：4个

xss跨站脚本攻击：1个

信息泄露：2个

任意文件下载：2个

前台SQL注入：13个

后台SQL注入：4个

前台文件上传：9个

后台文件上传：6个
图片

tongdaoatool's People

Contributors

xiaokp7 avatar

Stargazers

avatar AFK avatar QBZ-95 avatar Awake avatar avatar avatar P0m32Kun avatar apprentice avatar avatar avatar avatar avatar avatar avatar avatar avatar avatar Focus. avatar avatar arno avatar k@n3 avatar Remurin avatar avatar ybdt avatar HuiTaiL avatar avatar vul1ha0 avatar BrathonBai avatar guest_user avatar avatar 疏狂 avatar avatar avatar avatar HatsuneMiku avatar haker_c avatar Samsepik9 avatar 阿呆攻防 avatar avatar smile avatar avatar avatar avatar Richard avatar Lamb avatar Monoger avatar avatar avatar 陈安 avatar ki10Moc avatar avatar avatar Hot0ht avatar kk1230 avatar avatar avatar Perry Gore avatar avatar Black avatar OKAY_TC avatar 5rem avatar luochen avatar avatar avatar avatar hackerso avatar Predmet Chen avatar avatar 泡泡 avatar avatar James Brown avatar 夜梓月 avatar 炁 avatar xsshim avatar avatar avatar avatar avatar onewin avatar A. S. M. Muhiminul Hasan avatar avatar vic avatar avatar Xi4nb3i avatar avatar 9uoer avatar avatar saozi avatar avatar Qingyun Wu avatar Akira09 avatar avatar He1za1（黑仔） avatar avatar avatar avatar avatar silk avatar avatar 窝窝鸟 avatar

Watchers

avatar avatar

Forkers

mssky9527 imemaker randengshifu yeshuibo lay0us vx12345678 jrtkcoder tomfansdwdf upsecup 123github0123 acodervic danzee1 offsoc slsis liuyu771 pupulit zha0 huitail6 cream-sec 16778738

tongdaoatool's Issues

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.