读取php文件
如果我们使用文件包含直接包含php文件,那么他会以php的脚本形式去解析文件,我们是看不见其中的一些东西的,例如我们发现一个网站有文件包含漏洞,我们想用该漏洞去读取该网站的配置文件,配置文件里面往往会有数据库的信息(账号、密码等),但是我们直接包含他,他会被当作php代码解析,我们无法看到他的代码
比如我们要查看上面这个conf.php
文件中的这些配置信息,我们直接访问conf.php
发现他没有返回任何信息,所以我们就需要使用协议去将php代码文件以文本的形式读出来
php://filter/read=convert.base64-encode/resource=[路径]
这时候php代码会以base64的形式返回来,我们只需要对其解码即可
17人评论了“使用文件包含漏洞读取php文件”
xnxx
tipobet porn
Fantastic site Lots of helpful information here I am sending it to some friends ans additionally sharing in delicious And of course thanks for your effort
I don’t think the title of your article matches the content lol. Just kidding, mainly because I had some doubts after reading the article.
Keep up the fantastic work!
I don’t think the title of your article matches the content lol. Just kidding, mainly because I had some doubts after reading the article.
fantastic issues altogether, you simply won a new reader. What would you recommend about your post that you made a few days ago? Any certain?
I don’t think the title of your article matches the content lol. Just kidding, mainly because I had some doubts after reading the article.
I don’t think the title of your article matches the content lol. Just kidding, mainly because I had some doubts after reading the article.
I don’t think the title of your article matches the content lol. Just kidding, mainly because I had some doubts after reading the article.
I have not checked in here for a while as I thought it was getting boring, but the last few posts are good quality so I guess I’ll add you back to my daily bloglist. You deserve it my friend 🙂
Serving Iraq with pride, BWER supplies high-performance weighbridges designed to improve transport logistics, reduce inaccuracies, and optimize industrial processes across all sectors.
Very nice post. I just stumbled upon your blog and wished to say that I’ve really enjoyed surfing around your blog posts. After all I’ll be subscribing to your rss feed and I hope you write again soon!
Thank you for your sharing. I am worried that I lack creative ideas. It is your article that makes me full of hope. Thank you. But, I have a question, can you help me?
Your point of view caught my eye and was very interesting. Thanks. I have a question for you.
Wow! Thank you! I permanently needed to write on my website something like that. Can I implement a part of your post to my blog?
I don’t think the title of your article matches the content lol. Just kidding, mainly because I had some doubts after reading the article.