Shulou(Shulou.com)06/01 Report--

Pwd is a linux under a simple command, the main function is to output the absolute path of the current work, some people may think that this is useless, not a look at the front of the command can know it? But what if the sign in front of the command is not visible?

In the process of * testing, file upload is often involved, especially in the case of command execution vulnerabilities. If we don't know the current path, we don't even know where we uploaded it. Even if you successfully upload webshell, you still can't get the connection address of webshell, so pwd is a simple and practical command! Check the current path through pwd, and then check the relevant file attributes of the page, such as pictures, code files and other file names, and then look up or down from the current path to determine the relative path in the page corresponding to the current path. Once the path corresponds, then we can access the file we uploaded through web!

Root@kali:~/linuxcmd# pwd/root/linuxcmdroot@kali:~/linuxcmd#

If the current directory is a symbolic link, then I need to use the-P parameter to see the actual path!

Root@kali:~/linuxcmd# pwd-P

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.