1.测试test.php info.php php_info.php phpinfo.php3 k: R' d: K2 y3 \" ?
3 Q) h; O1 c v. w+ W2.扫描看有没有fck编辑器,如果有就用fckeditor\editor\dialog\fck_spellerpages\spellerpages\server-scripts\spellchecker.php爆
2 j& p/ A! O& A6 o5 w# o: W W. L+ W& H$ { \! ?
3.看看有没有phpmyadmin或者phpMyAdmin利用phpMyAdmin/libraries/select_lang.lib.php
$ ^5 ]5 {3 G% E" j. h7 CphpMyAdmin/darkblue_orange/layout.inc.php
3 O% C. u1 ?0 f2 sphpMyAdmin/index.php?lang[]=1
( b$ v @+ T |. W) c" U3 kphpmyadmin/themes/darkblue_orange/layout.inc.php5 a F1 G+ R% d9 Q# W+ e
4.利用搜索引擎爆绝对路径
6 N& I( p, g, B7 M4 ]5 w; C+ ~& Hsite:www.huangse.com Warning
' ?# q- Q, S* a" o, U* Esite:www.huangse.com inurl:Warning
* f6 z0 i6 U" `4 ]! W
7 d; e4 r3 N7 k7 N# J2 Y, _* f等以后慢慢往上补吧,利用单引号的方法俺就不说了。。。
! c0 c- s8 j3 t2 ^ |