apache解析漏洞

低版本本身自带

在版本 <= 2.2的apache中自带解析漏洞，低版本的apache对于一个文件的解析是从右往左的，例如我们为了绕过上传后门文件，将文件名命名为webshell.php.owf.rar.asc，攻击者在访问的时候，apache会从右往左开始查看该文件的后缀，.asc他发现不认识，所以继续往左，.rar他发现也不认识，就会继续往左，.owf不认识会继续往左，直到发现.php发现是他认识的，所以就会将该文件以php的方式解析，而上传的时候黑白名单检测后缀也可以绕过

配置不当

AddType

在apache的httpd.conf的文件中，如果将AddType application/x-httpd-php的后面加上 .jpg或者是其他任意格式

那么在你访问改后缀的时候都会被当成php的脚本代码去解析，例如我们在后面加入了.jpg，那当我们访问webshell.jpg的时候，该文件会被帮当作php文件去执行

AddHandler

在apache的httpd.conf文件中，如果将AddHandler php5-script的后面加上 .php，那么这时只要文件命中包含php，就会将文件当作php文件去解析执行，webshell.php.jpg会被当作脚本代码去解析执行

修复方案

修改配置文件，禁止.php文件执行、

在apache的httpd.conf文件中加上

<Files ~ ".(php.|php3.)">
    Order Allow,Deny
    Deny from all
</Files>

上面的意思是有.php或者php.或者.php3或者php3.这样php前后有.的就拒绝上传

伪静态

重写.php.*这类文件，在apache的httpd.conf文件中找到loadModule rewrite_module modules/mod_rewrite.so

<IfModule mod_rewrite.c>
RewriteEngine on
RewriteRule .(php.lphp3.)/index.php
RewriteRule .(pHp.lpHp3.)/index.php
RewriteRu1e .(php.lphP3.)/index.php
RewriteRu1e .(Php.lPhp3.)/index.php
RewriteRule .(PHp.lPHp3.)/index.php
RewriteRule .(PhP.lPhP3.)/index.php
RewriteRu1e .(pHP.lpHP3.)/index.php
RewriteRule .(PHP.IPHP3.)/index.php
</IfModu1e>

上面的意思就是当有这些.php.等这些出现时，都将重定向（跳转）到index.php下

16人评论了“apache解析漏洞”

porno ya bilenge
2024年 7月 8日在下午3:38

tipobet porn
Registrieren
2024年 8月 3日在下午2:51

Thanks for sharing. I read many of your blog posts, cool, your blog is very good.
სპამი არ გააგზავნოთ
2024年 8月 19日在下午3:21

lamerler olmez
Binance 註冊
2024年 8月 28日在上午2:33

Your point of view caught my eye and was very interesting. Thanks. I have a question for you. https://accounts.binance.com/ru/register-person?ref=V3MG69RO
attetlefe
2024年 8月 28日在下午4:30

Doesn t appear to be the same thing buy priligy 60 mg Antisense compounds, compositions and methods are provided for modulating the expression of SAP 1
smortergiremal
2024年 10月 21日在上午9:45

I have read a few excellent stuff here. Definitely value bookmarking for revisiting. I wonder how much effort you put to make such a excellent informative site.
binance signup bonus
2024年 10月 26日在上午4:47

Thanks for sharing. I read many of your blog posts, cool, your blog is very good.
Advenny
2024年 11月 11日在上午7:33

Rose Geranium is definitely paying off for us priligy fda approval Planning to have a baby can be very exciting
Advenny
2024年 11月 21日在上午10:06

priligy dapoxetine buy The alternative choices that have been available in the past offered only a modest benefit
Kayit Ol
2024年 11月 22日在上午1:32

Your point of view caught my eye and was very interesting. Thanks. I have a question for you.
binance
2024年 12月 4日在下午3:35

Your point of view caught my eye and was very interesting. Thanks. I have a question for you.
how to get cytotec pills
2024年 12月 9日在下午3:36

After this, sabotage performed by Russian authorities and replacing of computer data provided to WADA in 2018 resulted in further severe sanctions against Russian sport order generic cytotec online
ميزان شاحنة العراق
2024年 12月 18日在上午4:41

Serving Iraq with pride, BWER supplies high-performance weighbridges designed to improve transport logistics, reduce inaccuracies, and optimize industrial processes across all sectors.
binance referral bonus
2024年 12月 23日在下午4:13

Thank you for your sharing. I am worried that I lack creative ideas. It is your article that makes me full of hope. Thank you. But, I have a question, can you help me?
Registro en Binance
2025年 1月 8日在上午12:50

Thank you for your sharing. I am worried that I lack creative ideas. It is your article that makes me full of hope. Thank you. But, I have a question, can you help me?
binance sign up
2025年 1月 10日在上午12:52

Can you be more specific about the content of your enticle? After reading it, I still have some doubts. Hope you can help me.