1.测试test.php info.php php_info.php phpinfo.php
' X/ c. z7 R8 i. A! k2 v7 H) `: N/ [- N( \+ { t/ d
2.扫描看有没有fck编辑器,如果有就用fckeditor\editor\dialog\fck_spellerpages\spellerpages\server-scripts\spellchecker.php爆
, O( v" ~8 _- t) m3 u; t. [& [) K, |0 ?5 U2 s d
3.看看有没有phpmyadmin或者phpMyAdmin利用phpMyAdmin/libraries/select_lang.lib.php+ p7 ~3 N0 o9 n7 M* A/ {
phpMyAdmin/darkblue_orange/layout.inc.php
/ ^# ?2 @7 f' k5 L/ R) ephpMyAdmin/index.php?lang[]=1
0 o/ O# p% h& b) y6 x, ophpmyadmin/themes/darkblue_orange/layout.inc.php
1 s8 k0 t+ |1 @. w, t: `) e4.利用搜索引擎爆绝对路径9 ~" g: P% L# F3 F8 f: {/ ^
site:www.huangse.com Warning
' p- q) y0 |0 ?" S0 Bsite:www.huangse.com inurl:Warning
" [+ n& Y3 G; c* O
- {! r* h, ]! {7 u等以后慢慢往上补吧,利用单引号的方法俺就不说了。。。
1 P! b5 W5 A5 ? |