PoC： We can see that PHProxy has filtered some intranet addresses. However, it can still be bypassed by resolving the domain name to an intranet address. A simple proof is sho…

PoC： The default configuration after DCF installation is to access it without authorization，similar to the figure below. Allowing a user to have full control over the filename…