File Parsing Vulnerability - Apache File Parsing Vulnerability

1. Introduction to Apache file parsing

1. Introduction to the environment

2. Three methods of combining Apache and PHP

 

 

 2. Vulnerability principle

 

 

 3. Vulnerability Exploitation Example

1. Log in to the operating machine, visit http://ip, upload a file named xxx.xxx, it is intercepted, and it is judged as whitelist verification

 

 2. Rename the file to xxx.php.png, and upload the file. The content of the file is as follows, and the upload is successful

 

3. Using the Apache parsing vulnerability, visit http://ip/uploadfiles/xxx.php.png, the script file is parsed successfully

---

 That's all for this article!