第一周小结

我会带着你远行 2023-10-12 08:06 61阅读 0赞

![1669017-20190920163355863-306884297.png][]

1.任意文件下载

目标10.6.1.54

找到一个可以下载的东西，如图

![1669017-20190920161817403-2133855211.png][]

右键复制链接，打开

![1669017-20190920162033095-47741655.png][]

将dog\_cat.jpg随意更改一下，会报出错误，并说文件找不到

![1669017-20190920163009774-1499665604.png][]

这时候我们御剑扫描，这里有index.php，我们试着下载

![1669017-20190920162820997-1717696481.png][]

![1669017-20190920163156816-907074503.png][]

显然这个文件毫无用处，那我们这里下一下这个目录下的文件

![1669017-20190920163635794-922534431.png][]

我们找的这个文件，数据库用户名密码，还是有用的

![1669017-20190920163743064-245878215.png][]

2.本地包含文件

![1669017-20190920171855187-12434512.png][]

![1669017-20190920171928271-732821378.png][]

合成一个图片大马，并且想办法传上去

![1669017-20190920172518852-1764703721.png][]

![1669017-20190920173040499-1758950871.png][]

图片路径uploadfile/litpic/201909/15689717266n74c.jpg，

![1669017-20190920175140635-1510906868.png][]

3.命令执行漏洞

![loading.gif][]

转载于:https://www.cnblogs.com/abels0025/p/11559230.html

[1669017-20190920163355863-306884297.png]: https://img2018.cnblogs.com/blog/1669017/201909/1669017-20190920163355863-306884297.png
[1669017-20190920161817403-2133855211.png]: https://img2018.cnblogs.com/blog/1669017/201909/1669017-20190920161817403-2133855211.png
[1669017-20190920162033095-47741655.png]: https://img2018.cnblogs.com/blog/1669017/201909/1669017-20190920162033095-47741655.png
[1669017-20190920163009774-1499665604.png]: https://img2018.cnblogs.com/blog/1669017/201909/1669017-20190920163009774-1499665604.png
[1669017-20190920162820997-1717696481.png]: https://img2018.cnblogs.com/blog/1669017/201909/1669017-20190920162820997-1717696481.png
[1669017-20190920163156816-907074503.png]: https://img2018.cnblogs.com/blog/1669017/201909/1669017-20190920163156816-907074503.png
[1669017-20190920163635794-922534431.png]: https://img2018.cnblogs.com/blog/1669017/201909/1669017-20190920163635794-922534431.png
[1669017-20190920163743064-245878215.png]: https://img2018.cnblogs.com/blog/1669017/201909/1669017-20190920163743064-245878215.png
[1669017-20190920171855187-12434512.png]: https://img2018.cnblogs.com/blog/1669017/201909/1669017-20190920171855187-12434512.png
[1669017-20190920171928271-732821378.png]: https://img2018.cnblogs.com/blog/1669017/201909/1669017-20190920171928271-732821378.png
[1669017-20190920172518852-1764703721.png]: https://img2018.cnblogs.com/blog/1669017/201909/1669017-20190920172518852-1764703721.png
[1669017-20190920173040499-1758950871.png]: https://img2018.cnblogs.com/blog/1669017/201909/1669017-20190920173040499-1758950871.png
[1669017-20190920175140635-1510906868.png]: https://img2018.cnblogs.com/blog/1669017/201909/1669017-20190920175140635-1510906868.png
[loading.gif]: https://common.cnblogs.com/images/loading.gif