好未来（前学而思集团）旗下某站点系统未授权访问导致命令执行/涉及多个系统

**********
 1.http://**.**.**/_
 *****权*****
 **********
 *****43f26d5121bc508eaafb.png&qu*****
 **********
 **********
 *****175.67:8000/sc*****
 **********
 *****c/ho*****
 **********
 *****d880aa630776d4382878.png&qu*****
 **********
 *****ocalhost.localdoma*****
 *****domain localhost6 l*****
 **********
 *****3.69 *****
 *****测*****
 ***** yanfa.*****
 *****测*****
 ***** xueshe*****
 *****测*****
 ***** jiaosh*****
 *****测*****
 *****69 6t.*****
 *****拟考*****
 *****69 ksz*****
 *****评*****
 *****69 xsc*****
 *****统测*****
 ***** ht010.*****
 *****统接*****
 *****69 api*****
 *****sbbs.zhi*****
 **********
 **********
 ***** zkcms.zk.com comment.z*****
 **********
 *****kang.*****
 *****d3e9d98710504eb72fd3.png&qu*****
 **********
 *****系*****
 **********
 *****8aaaade6101074cec548.png&qu*****
 **********
 *****4b64dc4961a5b93eea66.png&qu*****
 **********
 *****cd523fc9d832b5f59eec.png&qu*****
 **********
 *****fig*****
 *****Ethernet  HWaddr *****
 *****cast:192.168.3.255*****
 *****16:3eff:fe7f:2c*****
 *****G MULTICAST  MT*****
 *****ors:0 dropped:0 *****
 *****rors:0 dropped:0*****
 *****s:0 txqueu*****
 ***** MiB)  TX bytes:4*****
 **********
 *****cap:Local*****
 *****27.0.0.1  M*****
 *****r: ::1/128*****
 *****UNNING  MTU:*****
 *****rs:0 dropped:0 *****
 *****rs:0 dropped:0 *****
 *****ons:0 txq*****
 *****8 KiB)  TX byt*****
 **********
 *****cod*****
 

http://111.204.175.67:8000/script

127.0.0.1   localhost localhost.localdomain localhost4 vmNodeWeb
 ::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
 
 #192.168.3.69 salt
 ####6T教研测试####
 #192.168.3.69 yanfa.zk.org
 ####6T学生测试####
 #192.168.3.69 xuesheng.zk.com
 ####6T教师测试####
 #192.168.3.69 jiaoshi.zk.com
 ####6T测评测试####
 #192.168.3.69 6t.zk.com
 ####6T学科模拟考测试####
 #192.168.3.69 kszx.zk.com
 ####6T学商测评测试####
 #192.168.3.69 xscp.zk.com
 ####业务系统测试####
 #192.168.3.69 ht010.zk.com
 ####业务系统接口####
 #192.168.3.69 api.zk.com
 #192.168.3.69 jsbbs.zhikang.org
 
 
 121.5.20.166 i.zk.com bjkc.zk.com bjhd.zk.com zkcms.zk.com comment.zk.com img.zk.com

eth0      Link encap:Ethernet  HWaddr 00:16:3E:7F:2C:74  
           inet addr:192.168.3.69  Bcast:192.168.3.255  Mask:255.255.255.0
           inet6 addr: fe80::216:3eff:fe7f:2c74/64 Scope:Link
           UP BROADCAST RUNNING MULTICAST  MTU:1500  Metric:1
           RX packets:435236 errors:0 dropped:0 overruns:0 frame:0
           TX packets:3248105 errors:0 dropped:0 overruns:0 carrier:0
           collisions:0 txqueuelen:1000 
           RX bytes:45788784 (43.6 MiB)  TX bytes:432986880 (412.9 MiB)
 
 lo        Link encap:Local Loopback  
           inet addr:127.0.0.1  Mask:255.0.0.0
           inet6 addr: ::1/128 Scope:Host
           UP LOOPBACK RUNNING  MTU:16436  Metric:1
           RX packets:110 errors:0 dropped:0 overruns:0 frame:0
           TX packets:110 errors:0 dropped:0 overruns:0 carrier:0
           collisions:0 txqueuelen:0 
           RX bytes:7046 (6.8 KiB)  TX bytes:7046 (6.8 KiB)