1.测试test.php info.php php_info.php phpinfo.php. w; b1 n; Q, [: V% T: V0 h
1 b, ^& t- r! {; \# I. f2.扫描看有没有fck编辑器，如果有就用fckeditor\editor\dialog\fck_spellerpages\spellerpages\server-scripts\spellchecker.php爆
c2 e2 E' r* `/ D* r2 X/ S* a4 ~ D# u" [3 C
3.看看有没有phpmyadmin或者phpMyAdmin利用phpMyAdmin/libraries/select_lang.lib.php7 x g& O% [1 s/ B( H4 L
phpMyAdmin/darkblue_orange/layout.inc.php& l0 r- Q1 k% d% E/ Z6 L$ `: `# T
phpMyAdmin/index.php?lang[]=1+ I5 a% \, b+ e, z% V
phpmyadmin/themes/darkblue_orange/layout.inc.php" t3 c2 w; V f$ b9 |
4.利用搜索引擎爆绝对路径
2 u8 B) E' a% G! x/ f9 `site:www.huangse.com Warning
& u6 U! P; H- Psite:www.huangse.com inurl:Warning
6 |8 \, P! x. u+ F! g3 P z# q5 X3 c) T, L5 M5 ]4 V1 g. C5 n* ^# M; |
等以后慢慢往上补吧,利用单引号的方法俺就不说了。。。) _% s* \6 s" I- j! [* f w9 D
|
发表于 2012-9-15 13:49:11
收藏
支持
反对