Apache SSI Remote command execution vulnerability

1. SSI Instruction,

SSI Instruction article reference link

Use ideas ： It is found that the file suffix is .shtml

2. Exploit

1. Vulhub shooting range —Apache SSI Remote command execution vulnerability

1. Write first .shtml file , The content of the document is ：

2. Carry out the bag , Analyze the obtained data ：
   

3. Execute code ：
   

2. Live range

7086)]

2. Live range

1. [BJDCTF2020]EasySearch 1