https://github.com/pizz33/seeyon_saveexcel

致远OA_saveExcel任意文件上传exp (2023/06版本修复)
https://github.com/pizz33/seeyon_saveexcel

Last synced: 8 months ago
JSON representation

致远OA_saveExcel任意文件上传exp (2023/06版本修复)

• Host: GitHub
• URL: https://github.com/pizz33/seeyon_saveexcel
• Owner: Pizz33
• Created: 2024-03-20T08:32:01.000Z (about 2 years ago)
• Default Branch: main
• Last Pushed: 2024-03-20T09:46:00.000Z (about 2 years ago)
• Last Synced: 2025-10-13T14:04:01.000Z (8 months ago)
• Language: Go
• Size: 8.79 KB
• Stars: 8
• Watchers: 1
• Forks: 0
• Open Issues: 0
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

README

          
# 致远OA_saveExcel任意文件上传exp (2023/06版本修复) 

# Usage

```

Usage：go run seeyon_saveExcel.go -u http://xx.xx.xx.xx -f xx.jsp (-c)

```

```

Options:

  -c string

        cookie [Optional]

        

  -f string

        file [Required]

        

  -u string

        target url [Required]

```

# 利用截图

有可能存在漏洞接口但上传不成功的情况，可添加任意用户cookie进行后台上传

![image](https://github.com/Pizz33/seeyon_saveExcel/assets/88339946/244ffc51-d980-4c83-bcdd-f773ba5e4cbb)

![image](https://github.com/Pizz33/seeyon_saveExcel/assets/88339946/eed48758-2c5c-4b17-9c5b-944561862d0a)

# 声明

仅限用于技术研究和获得正式授权的攻防项目，请使用者遵守《中华人民共和国网络安全法》，切勿用于任何非法活动，若将工具做其他用途，由使用者承担全部法律及连带责任，作者及发布者不承担任何法律及连带责任！