1.测试test.php info.php php_info.php phpinfo.php, E* q- X6 v1 n* g m
- N, `: f" c. N; w# U* K) k2.扫描看有没有fck编辑器,如果有就用fckeditor\editor\dialog\fck_spellerpages\spellerpages\server-scripts\spellchecker.php爆
- g5 {. y% c( n0 h% D# B( N- w/ p" p7 f& \, x7 H4 V6 w5 v* |
3.看看有没有phpmyadmin或者phpMyAdmin利用phpMyAdmin/libraries/select_lang.lib.php
- t" [- p$ c$ x7 N- L7 a9 y* {: AphpMyAdmin/darkblue_orange/layout.inc.php
" e @: K: _8 h+ V' k0 o6 D" O1 ?$ dphpMyAdmin/index.php?lang[]=1' h# V# x9 t* _' } E) S
phpmyadmin/themes/darkblue_orange/layout.inc.php
; K6 P/ R7 R2 u4 V6 Q+ Z$ y* A6 ~1 ~: X4.利用搜索引擎爆绝对路径- ~' K5 s+ ?% g4 B T5 H4 q
site:www.huangse.com Warning
8 i, W" O3 J* `; \$ @+ V1 Y( x# o! {site:www.huangse.com inurl:Warning
6 Z3 w9 a: D/ N2 B
# |) t* r# Z l/ Z) ~; M等以后慢慢往上补吧,利用单引号的方法俺就不说了。。。( C$ {& T4 g% e# Q8 e Y( k$ [( i
|