Webshell Struts framework vulnerability can cause Intranet penetration

# Http://weibo.com/u/3022690473welcome to my microblog! # In fact this problem is caused by a remote command execution of the internal network penetration # Problem in the market cooperation manufacturers of the machine front Management Background: # http://amarket.channel.gfan.com/system/LoginAction! Login. action ## large permissions ## bounce a shell first ## I am currently in the 10.8.8.0 segment. Since it is a root permission, I will not consider raising the permission, direct knife copy nmap takes a circle on the Intranet #


# Nmap done: 256 IP addresses (136 hosts up) scanned in 852.68 seconds # There are a total of 136 machines online, and there are still a lot of machines. If other segments are scanned, it is estimated that they will all be bright! # I wanted to penetrate through the Intranet, but I thought it would be hard to get the water meter checked. # security is no small matter #Solution:Happy New Year, manufacturers are coming soon! Upgrade Struts framework to enhance management