1.测试test.php info.php php_info.php phpinfo.php% m5 ?, ?/ }* ], J: U
; k: R: t; g+ Z; |' R+ ]2.扫描看有没有fck编辑器,如果有就用fckeditor\editor\dialog\fck_spellerpages\spellerpages\server-scripts\spellchecker.php爆
w5 Z2 l) F: @; t* M8 |* Y1 Y- y& V2 [ H+ E
3.看看有没有phpmyadmin或者phpMyAdmin利用phpMyAdmin/libraries/select_lang.lib.php
) V7 e* A$ _- h; D3 EphpMyAdmin/darkblue_orange/layout.inc.php
7 U1 q% X, ^0 w7 x) T6 bphpMyAdmin/index.php?lang[]=15 M3 W% W+ h/ y9 X% q: e
phpmyadmin/themes/darkblue_orange/layout.inc.php
) ^. w9 c- d5 u0 x4.利用搜索引擎爆绝对路径
" @7 y K2 W. y1 t7 T9 x& Y% m- tsite:www.huangse.com Warning
' t4 m) g! c$ k. r9 Nsite:www.huangse.com inurl:Warning
: q5 B; I) `( ^6 k& N* r6 Q
. q! B1 O0 z( n3 }6 B# _6 E9 X等以后慢慢往上补吧,利用单引号的方法俺就不说了。。。( W! W- _6 e4 l1 x, T7 t) U
|