1.测试test.php info.php php_info.php phpinfo.php7 i3 I0 R% l( ]4 N% w
, @0 D' n& N- n6 B/ f% F+ Y/ m
2.扫描看有没有fck编辑器，如果有就用fckeditor\editor\dialog\fck_spellerpages\spellerpages\server-scripts\spellchecker.php爆: _/ I l) z% d3 d" x7 Y/ T( G9 g' V
8 d0 t w! l V- n& o
3.看看有没有phpmyadmin或者phpMyAdmin利用phpMyAdmin/libraries/select_lang.lib.php
2 r1 ]) \4 w* @* z+ [' {* i, xphpMyAdmin/darkblue_orange/layout.inc.php
- U6 M$ a% `3 [" @# aphpMyAdmin/index.php?lang[]=1
# n% K% `8 @6 }5 Kphpmyadmin/themes/darkblue_orange/layout.inc.php
* F& e# N( O0 K% l4.利用搜索引擎爆绝对路径 F% _5 E1 z( k* i* n$ W
site:www.huangse.com Warning! S0 Z; Y& e( D7 c# v
site:www.huangse.com inurl:Warning
) I' O( l* T7 d8 n8 q+ v
8 {; @6 Y6 B+ `6 h, L* H4 ?等以后慢慢往上补吧,利用单引号的方法俺就不说了。。。6 b, }$ A- ?6 i9 U" U8 n
|
发表于 2012-9-15 13:49:11
收藏
支持
反对