用友漏洞分析+复现-环境搭建

代码获取

略

环境部署

OS: Server 2022
DB: 08R2

步骤

1. 解压获取的代码，获得如下目录
   
2. 解压NC6.5到任意目录
   
   
   
3. 双击setup后安装过程略
4. 装完后配置
   
   数据库初始化
   

   USE master
   go
   IF DB_ID (N'NC65') IS NOT NULL
   DROP DATABASE [NC65]
   go
   CREATE DATABASE [NC65]
   go
   ALTER DATABASE [NC65] ADD FILEGROUP [NNC_DATA01]
   go
   ALTER DATABASE [NC65] ADD FILEGROUP [NNC_DATA02]
   go
   ALTER DATABASE [NC65] ADD FILEGROUP [NNC_DATA03]
   go
   ALTER DATABASE [NC65] ADD FILEGROUP [NNC_INDEX01]
   go
   ALTER DATABASE [NC65] ADD FILEGROUP [NNC_INDEX02]
   go
   ALTER DATABASE [NC65] ADD FILEGROUP [NNC_INDEX03]
   go
   ALTER DATABASE [NC65] ADD FILE(NAME = N'nnc_data01', FILENAME = N'C:\NC\nnc_data01_Data.NDF' , SIZE = 500, FILEGROWTH = 200) TO FILEGROUP [NNC_DATA01]
   go
   ALTER DATABASE [NC65] ADD FILE(NAME = N'nnc_data02', FILENAME = N'C:\NC\nnc_data02_Data.NDF' , SIZE = 500, FILEGROWTH = 200) TO FILEGROUP [NNC_DATA02]
   go
   ALTER DATABASE [NC65] ADD FILE(NAME = N'nnc_data03', FILENAME = N'C:\NC\nnc_data03_Data.NDF' , SIZE = 500, FILEGROWTH = 200) TO FILEGROUP [NNC_DATA03]
   go
   ALTER DATABASE [NC65] ADD FILE(NAME = N'nnc_index01', FILENAME = N'C:\NC\nnc_index01_Data.NDF' , SIZE = 500, FILEGROWTH = 100) TO FILEGROUP [NNC_INDEX01]
   go
   ALTER DATABASE [NC65] ADD FILE(NAME = N'nnc_index02', FILENAME = N'C:\NC\nnc_index02_Data.NDF' , SIZE = 500, FILEGROWTH = 100) TO FILEGROUP [NNC_INDEX02]
   go
   ALTER DATABASE [NC65] ADD FILE(NAME = N'nnc_index03', FILENAME = N'C:\NC\nnc_index03_Data.NDF' , SIZE = 500, FILEGROWTH = 100) TO FILEGROUP [NNC_INDEX03]
   go

   调整临时表空间

   declare @name char(50)
          declare @sql nvarchar(500)
          select @name=rtrim(name) from tempdb.dbo.sysfiles where status & 0x40 != 0x40
          set @sql='alter database tempdb modify file ( name='+@name+',size=600mb,filegrowth=10mb)'
          exec master.dbo.sp_executesql @sql

   配置数据源、文件服务器等，然后关闭
   
   
   这里的服务器配置只生效第一条
   
5. 获取license
   进入C:\yonyou\home\bin\sysConfig.bat
   
   按照文档步骤生成license
   
6. 重启服务后即可使用
   
7. 安装各类模块
   

调试配置

idea新建JVM远程调试

用友配置工具里最后加上这段然后启动

随便断个点

成功断下

坑

1. 在模块安装后不能中途取消，否则数据库会出错
2. 双网卡需先配置成单网卡后再启动