Select Browser Mobile | Continue

Silic Group Froum Archive - Silic Security

 Forgot Password?
 Join Us
Search
Show: 3122|Reply: 43

[原创] 另姿势越权上传渗透测试厦门大学附属医院

[Copy URL]
cck65 The user has been deleted
Posted 2016-8-19 12:33:41 | Show all replies |Read Mode
lt.png lt1.png lt2.png
教程文本
大家好,我是Ck~奋斗 QQ:972035470 NoSafe交流群:493105558
今天给大家带来的是另姿势渗透测试厦门大学附属医院
接下来请大家仔细看~
用御剑扫一扫~
eweb编辑器
我们测试下默认的后台,没后台~估计修改了~
这个pass
http://xxx.com/admin_manage/login.asp  后台,我们扫描下目录文件
.............................等待ing
看看哪里可以利用
发现一个上传点
。。一个图片是txt文本~可疑,我们上传看看
.....这个不知是否变了,我们刷新看看
http://xxx.com/images/adpic.asp   变了...
咳咳,那么我就不继续深入了,该干嘛的干嘛~,
教程就到这结束了~



教程下载地址:
https://share.weiyun.com/a77a3bbeaebf8bc488369d9207945250
suy The user has been deleted
Posted 2016-8-19 13:25:05 | Show all replies
没回复之前看不出个所以然,回复看看是否埋下伏笔,另类在哪里?
suy The user has been deleted
Posted 2016-8-19 13:28:20 | Show all replies
本屌找不到重点,怪我太渣,难不成就是传说中的任意文件上传?另类?回复后带教程links,连上附件的勇气都没有了吗?直接弄个外链?
yeyu The user has been deleted
Posted 2016-8-19 14:16:35 | Show all replies
没回复之前看不出个所以然,回复看看是否埋下伏笔,另类在哪里?
laofan The user has been deleted
Posted 2016-8-19 14:58:57 | Show all replies
我是来学习的,姿势不错学习一下,感谢
Chess The user has been deleted
Posted 2016-8-19 16:01:26 | Show all replies
竟然是视频教程。。。
Posted 2016-8-19 17:29:02 | Show all replies
suy 发表于 2016-8-19 13:28
本屌找不到重点,怪我太渣,难不成就是传说中的任意文件上传?另类?回复后带教程links,连上附件的勇气都 ...

嗯,很强势。视频我就不下载了 你说说他视频说了啥吧
suy The user has been deleted
Posted 2016-8-19 18:37:01 | Show all replies
iverson5 发表于 2016-8-19 17:29
嗯,很强势。视频我就不下载了 你说说他视频说了啥吧

没下载,看到附件我都软了,视频我都虚了,就不看
冷尊 The user has been deleted
Posted 2016-8-19 18:53:29 | Show all replies
来学学姿势
Posted 2016-8-19 21:07:22 | Show all replies
suy 发表于 2016-8-19 18:37
没下载,看到附件我都软了,视频我都虚了,就不看

看来你硬不起来了。
莫须有 The user has been deleted
Posted 2016-8-20 00:13:00 | Show all replies
回帖是一种美德
南宫剑影 The user has been deleted
Posted 2016-8-20 02:12:19 | Show all replies
我就是来学习的啊
wangbadang The user has been deleted
Posted 2016-8-20 08:52:40 | Show all replies
学习一下经验
wangbadang The user has been deleted
Posted 2016-8-20 09:01:44 | Show all replies
没啥营养直接上传
赵家小少爷 The user has been deleted
Posted 2016-8-20 09:26:39 | Show all replies
哦?这很另类
治愈~~ The user has been deleted
Posted 2016-8-20 10:18:48 | Show all replies
不太清楚 回复看看内容
Amone The user has been deleted
Posted 2016-8-20 12:42:27 | Show all replies
来学学姿势
harkie The user has been deleted
Posted 2016-8-20 13:38:16 | Show all replies
没回复之前看不出个所以然,回复看看是否埋下伏笔,另类在哪里?
纯洁小白 The user has been deleted
Posted 2016-8-20 22:47:32 | Show all replies
感觉有点水啊 这文章
zbcoolen The user has been deleted
Posted 2016-8-20 23:01:28 | Show all replies

没回复之前看不出个所以然,回复看看是否埋下伏笔,另类在哪里?
You need to login before reply! Login | Join Us

Credit Rules of This Forum

Close

公告Privious /1 Next

小黑屋|手机版|Archiver|Silic Security

GMT+8, 2017-8-19 15:27

© 2001-2014 Silic Corp.

Quick Reply Top Return List