Select Browser Mobile | Continue

Silic Group Froum Archive - Silic Security

 Forgot Password?
 Join Us
Search
Show: 18418|Reply: 524

[原创] 关于上传"只能上传jpg为后缀名不能截断解决方法“

    [Copy URL]
Posted 2015-8-4 20:59:30 | Show all replies |Read Mode
好吧,表示 前几天 有人问道

上传文件重命名,怎么搞?一个上传点,假设是白名单只能上传jpg,上传之后还重命名为20150802xxx.jpg   这类,连解析iis漏洞都无法尝试,这个时候有啥办法?

这里我就说个方法吧

此方法绝无前例{装逼了啊哈啊哈2333

[ hide ]回复可见已取消

首先上图。。

QQ截图20150804205208.png

类似这种的上传 iis6.0解析漏洞也用不上

QQ截图20150804205321.png

最后开大招 "1.aspx".jpg"

QQ截图20150804205357.png

[/ hide ]回复可见已取消

Rate

2

View all rate

Posted 2015-8-4 21:02:59 | Show all replies
这个科普有点意思
styx The user has been deleted
Posted 2015-8-4 21:03:49 | Show all replies
这个要回复看看
xker The user has been deleted
Posted 2015-8-4 21:10:58 | Show all replies
双文件或者数据流截断?
xker The user has been deleted
Posted 2015-8-4 21:12:21 | Show all replies
看完隐藏贴顿时感觉lz这方法绝对奇人奇技,回头我试试
飘准普通发 The user has been deleted
Posted 2015-8-4 21:35:10 | Show all replies
那我就回复一下
whchang8 The user has been deleted
Posted 2015-8-4 22:05:00 | Show all replies
这个一定要学习下
Mosquito The user has been deleted
Posted 2015-8-4 22:16:31 | Show all replies
那么吊。。
001 The user has been deleted
Posted 2015-8-4 22:27:22 | Show all replies
目睹一下!能不能行
JJ-Fly The user has been deleted
Posted 2015-8-4 22:34:56 | Show all replies
学习下 谢谢                                                   
Posted 2015-8-4 22:52:09 | Show all replies
已经不能更牛逼了
Jumbo The user has been deleted
Posted 2015-8-4 22:54:15 | Show all replies
这个得看看
红石 The user has been deleted
Posted 2015-8-4 22:54:22 | Show all replies
围观围观 !!!!!!!!!!!!!!!!!!!!!!!
gmfork The user has been deleted
Posted 2015-8-4 22:54:24 | Show all replies
回复看看
shizhong The user has been deleted
Posted 2015-8-4 22:55:20 | Show all replies
  这方法好~   谢了~
zhj527641718 The user has been deleted
Posted 2015-8-4 22:55:54 | Show all replies
默默大~~牛
青娱乐灬雷锋 The user has been deleted
Posted 2015-8-4 22:56:02 | Show all replies
有什么好方法啊?
zhj527641718 The user has been deleted
Posted 2015-8-4 22:56:15 | Show all replies
6666666值得学习
ubuywerush The user has been deleted
Posted 2015-8-4 22:56:32 | Show all replies
看看30大大说的不能更牛逼了
Tesla The user has been deleted
Posted 2015-8-4 22:57:33 | Show all replies
围观大牛姿势
You need to login before reply! Login | Join Us

Credit Rules of This Forum

Close

公告Privious /1 Next

小黑屋|手机版|Archiver|Silic Security

GMT+8, 2017-3-24 10:07

© 2001-2014 Silic Corp.

Quick Reply Top Return List