https://github.com/NS-Sp4ce/TongDaOA-Fake-User

通达OA 任意用户登录漏洞
https://github.com/NS-Sp4ce/TongDaOA-Fake-User

Last synced: 2 months ago
JSON representation

通达OA 任意用户登录漏洞

• Host: GitHub
• URL: https://github.com/NS-Sp4ce/TongDaOA-Fake-User
• Owner: NS-Sp4ce
• Created: 2020-04-22T07:14:13.000Z (almost 5 years ago)
• Default Branch: master
• Last Pushed: 2020-08-27T11:38:28.000Z (over 4 years ago)
• Last Synced: 2024-08-05T17:37:23.102Z (6 months ago)
• Language: Python
• Homepage:
• Size: 16.6 KB
• Stars: 356
• Watchers: 6
• Forks: 110
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-hacking-lists - NS-Sp4ce/TongDaOA-Fake-User - 通达OA 任意用户登录漏洞 (Python)

README

        
# TongDaOA-Fake-User

通达OA 前台任意用户登录漏洞

**仅供安全研究，禁止非法利用！**

# 使用方法

1. python3 poc.py -v 版本 -url url

2. 运行并获取到可用的SESSIONID

3. 替换浏览器Cookie中的SESSIONID即可实现登录为admin

# 影响范围

**通达OA2017、V11.X