大华智慧园区设备开放了文件上传功能，但未在上传的文件类型、大小、格式、路径等方面进行严格的限制和过滤，导致攻击者可以通过构造恶意文件并上传到设备上，然后利用该漏洞获取权限并执行任意命令。
Usage:
python3 SMART-PARK.py -h
-
Notifications
You must be signed in to change notification settings - Fork 0
gallopsec/SMART_PARK
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Folders and files
| Name | Name | Last commit message | Last commit date | |
|---|---|---|---|---|
Repository files navigation
About
大华智慧园区综合管理平台文件上传漏洞POC
Resources
Stars
Watchers
Forks
Releases
No releases published
Packages 0
No packages published