Shulou(Shulou.com)06/01 Report--

Sometimes you will encounter the verification code of the blacklist when you audit the code or when uploading the article. For example, the regular script name asp php jsp does not allow uploading. Here are some bypass methods I have summarized.

Shtml

/ / can be used to read files

/ / can be used to execute commands

Iis parsing

Sanr.php;.gif

Sanr.asp;.jpg

Sanr.asp/sanr.jpg

.user.ini

User.ini

Auto_prepend_file: specifies the code to be executed before each PHP page is executed

Auto_prepend_file=demo.gif (demo.gif is loaded on each page)

.htaccess

AddTypeapplication/x-httpd-php .jpg

Window characteristics

Use spaces demo.php spaces

The decimal point goes around demo.php.

Ads data flow demo.php::$DATA

Ads data stream (but the file is empty) demo.php:jpg

The Window wildcard demo.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.