Select Browser Mobile | Continue

Silic Group Froum Archive - Silic Security

 Forgot Password?
 Join Us
Search
Show: 13341|Reply: 281

[原创] 一次绕过上传

  [Copy URL]
Posted 2016-1-10 21:43:14 | Show all replies |Read Mode
一位群友的求助,就开始了上传之路。

iis 6.0 + asp + 后台权限 + 安全狗。

看了看了上传,这上传类似南方数据的上传。

不扯淡了,咱们开始上传吧。


首先南方数据的上传有双上传漏洞。

QQ截图20160110213543.png

但是被狗咬了....
QQ截图20160110213630.png

哈哈哈,感觉我好贱,隐藏隐藏!!!
咱们来测试一下去掉“.”能否上传
QQ截图20160110213830.png
狗是过了,被程序拦截了,
但是过滤还是不行...

最终
QQ截图20160110213950.png

访问瞅瞅

QQ截图20160110214222.png






Rate

1

View all rate

dfewege The user has been deleted
Posted 2016-1-10 21:47:10 | Show all replies
沙发         
雅蓝 The user has been deleted
Posted 2016-1-10 21:47:35 | Show all replies
学习过狗姿势
Star The user has been deleted
Posted 2016-1-10 22:10:55 | Show all replies
然后呢?看一下梦胸怎么搞得?
JJ-Fly The user has been deleted
Posted 2016-1-10 22:11:23 | Show all replies
学习下                                  谢谢
nolove The user has been deleted
Posted 2016-1-10 22:19:10 from mobile phone | Show all replies
Salut tout le monde, laquelle fait
suy The user has been deleted
Posted 2016-1-10 22:25:14 | Show all replies
有没有打码?有没有漏点
Grep The user has been deleted
Posted 2016-1-10 22:28:37 | Show all replies
看上传姿势
流弊的小白 The user has been deleted
Posted 2016-1-10 22:34:48 | Show all replies
看看梦胸的与狗共舞
MisakaMikoto The user has been deleted
Posted 2016-1-10 22:39:48 | Show all replies
感觉恢复看看
偏执狂 The user has been deleted
Posted 2016-1-10 23:17:46 | Show all replies
看下怎么过狗
360kickflip The user has been deleted
Posted 2016-1-10 23:28:24 | Show all replies
kanha............
Siwell The user has been deleted
Posted 2016-1-10 23:29:29 | Show all replies
学习学习,谢谢分享。
Tabris The user has been deleted
Posted 2016-1-10 23:29:50 | Show all replies
前排看看。。
Posted 2016-1-10 23:44:52 | Show all replies
本帖最后由 zkj 于 2016-1-10 23:45 编辑

姿势流流的。
夜尽天明 The user has been deleted
Posted 2016-1-10 23:55:40 | Show all replies
洗洗睡了,好晚了
疯魔 The user has been deleted
Posted 2016-1-10 23:59:42 | Show all replies
但是被狗咬了....
color The user has been deleted
Posted 2016-1-11 00:00:43 | Show all replies
牛逼技术贴 我来了
cc11 The user has been deleted
Posted 2016-1-11 00:08:56 | Show all replies
学习过狗绝技
Isred The user has been deleted
Posted 2016-1-11 00:10:19 | Show all replies
看看有木有楼主总结的上传方法
You need to login before reply! Login | Join Us

Credit Rules of This Forum

Close

公告Privious /1 Next

小黑屋|手机版|Archiver|Silic Security

GMT+8, 2017-8-19 15:31

© 2001-2014 Silic Corp.

Quick Reply Top Return List