{"id":87,"date":"2021-10-28T22:33:23","date_gmt":"2021-10-28T14:33:23","guid":{"rendered":"https:\/\/www.hm-zy.cn\/?p=87"},"modified":"2022-09-01T22:38:27","modified_gmt":"2022-09-01T14:38:27","slug":"%e6%9a%97%e6%9c%88%e9%9d%b6%e5%9c%ba%e6%b8%97%e9%80%8fwp%e6%9c%aa%e5%ae%8c%e6%88%90","status":"publish","type":"post","link":"https:\/\/www.hm-zy.cn\/?p=87","title":{"rendered":"\u6697\u6708\u9776\u573a\u6e17\u900fwp(\u672a\u5b8c\u6210)"},"content":{"rendered":"

\u7b2c\u4e00\u5c42<\/h2>\n

WEB1<\/h3>\n

\u6253\u5f00\u4e4b\u540e\u662f\u4e00\u4e2aCMS<\/p>\n

\"undefined\"<\/p>\n

<\/noscript><\/p>\n

\u626b\u63cf\u7aef\u53e3\u4e4b\u540e\u53d1\u73b0\u5f00\u653e\u4e863306\u6570\u636e\u5e93\uff0c\u548cFTP\u8fd9\u4e00\u7c7b\u3002\u8fd8\u6709\u4e00\u4e2a23\u6bb5\u7684IP<\/p>\n

\"undefined\"<\/p>\n

<\/noscript><\/p>\n

\u626b\u63cf\u540e\u53f0\uff0c\u53d1\u73b0\u4e00\u4e2a\u524d\u53f0\u767b\u5f55\uff0c\u4e00\u4e2a\u540e\u53f0\u767b\u5f55\uff0c\u4e00\u4e2anews\u503c<\/p>\n

\"undefined\"<\/p>\n

<\/noscript><\/p>\n

\"undefined\"<\/p>\n

<\/noscript><\/p>\n

\u5c1d\u8bd5\u6ce8\u518c\u4e4b\u540e\u767b\u5f55<\/p>\n

\"undefined\"<\/p>\n

<\/noscript><\/p>\n

\u67e5\u4e86\u516c\u5f00HDH\u7684\u6f0f\u6d1e\uff0c\u51e0\u4e4e\u90fd\u6ca1\u6709\u516c\u5f00\uff0c\u610f\u5916\u7684\u53d1\u73b0\u6587\u672c\u7f16\u8f91\u5668\u4f3c\u4e4e\u53ef\u4ee5\u5165\u624b\u3002\u6839\u636e\u6e90\u7801\u786e\u8ba4\uff0c\u5728net\u6587\u4ef6\u5939\u6709\u5bf9\u5e94\u7684\u6f0f\u6d1e<\/p>\n

\"undefined\"<\/p>\n

<\/noscript><\/p>\n

\"undefined\"<\/p>\n

<\/noscript><\/p>\n

\u51c6\u5907\u4e00\u4e2a\u56fe\u7247\u9a6c\uff0c\u672c\u5730\u6784\u5efaPOC\uff0c\u5229\u7528POC\u4e0a\u4f20\u3002<\/p>\n

<form action="http:\/\/www.ackmoon.com\/admin\/net\/controller.ashx?action=catchimage"enctype="application\/x-www-form-urlencoded"  method="POST">   <p>shell addr:<input type="text" name="source[]" \/><\/p >   <inputtype="submit" value="Submit" \/>\n<\/form><\/code><\/pre>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\u94fe\u63a5\u4e0ashell\uff0c\u5f00\u59cb\u8fdb\u5165\u7b2c\u4e8c\u5c42\u7684\u4fe1\u606f\u6536\u96c6\u3002\u53d1\u73b0\u6743\u9650\u592a\u4f4e\uff0c\u6709360\uff0c\u8fd8\u9700\u8981\u63d0\u6743\u3002\u5148\u63d0\u524d\u4ee3\u7406\u51fa\u6765\u3002\u53d1\u73b0\u8fd8\u6709\u7b2c\u4e8c\u5f20\u7f51\u5361\uff0c\u626b\u4e00\u4e0b\u6bb5\u3002<\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\u5728\u914d\u7f6e\u6587\u4ef6\u4e2d\u53d1\u73b0\u6709\u4e00\u4e2a\u6570\u636e\u5e93<\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
DATA1<\/h3>\n
\u5c1d\u8bd5\u94fe\u63a5<\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\u7ecf\u8fc7\u67e5\u8be2\u53ef\u4ee5\u4f7f\u7528xp_cmdshell\u6267\u884c\u7cfb\u7edf\u547d\u4ee4\uff0c\u5148\u6253\u5f00xp_cmdshell<\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\u5c1d\u8bd5\u6267\u884c\u7cfb\u7edf\u547d\u4ee4<\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\u4f7f\u7528MDAT\u8fdb\u884c\u4e0a\u4f20cs\u4e0a\u7ebf\uff0c\u9700\u8981\u8fdb\u7a0b\u6ce8\u5165<\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
Web2<\/h3>\n
\u53ef\u4ee5\u770b\u5230\u6709\u4e00\u4e2a25\u7684web\uff0c\u8bbf\u95ee\u8bd5\u8bd5<\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\u53d1\u73b0\u662f\u4e00\u4e2ajwt\u5b9e\u4f8b\uff0c\u6709\u8bf4\u7528JWT TOKEY\u8fdb\u884c\u7834\u89e3\u7684\uff0c\u5148\u8fdb\u884c\u76ee\u5f55\u626b\u63cf\uff0c\u53d1\u73b0\u90fd\u662f\u522b\u4eba\u7528\u7684shell\u548cphpinfo<\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\u786e\u5b9a\u53c8\u662f\u4e00\u53f0windows\uff0c\u521a\u521a\u67e5\u4e86\u4e00\u4e0b\uff0c\u90fd\u662f\u6709jwttool\u7206\u7834\uff0c\u83b7\u5f97xcookie\u5c31\u53ef\u4ee5\u3002\u8fdb\u884c\u7206\u7834\uff0c\u83b7\u5f97\u5bc6\u7801\u662fQweasdzxc5\uff0c\u53d1\u73b0admin\u5565\u90fd\u65e0<\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\u91cd\u65b0\u5ba1\u67e5\u521a\u521a\u7684\u914d\u7f6e\u6587\u4ef6\uff0c\u53d1\u73b0\u662fphpstudy\u7684\uff0c\u4e0b\u8f7dphpstudy\u53d1\u73b0\uff0c\u7528\u7684\u662fphpmyadmin4.8.5\uff0c\u90a3\u4e48\u8def\u5f84\u77e5\u9053\uff0c\u5c1d\u8bd5\u767b\u5f55\u6210\u529f\uff0cphpmyadmin\u65e5\u5e38\u65e5\u5fd7shell\u3002<\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
phpmyadmin\u5c1d\u8bd5\u4f7f\u7528\u65e5\u5fd7\u5199\u5165\u4e00\u53e5\u8bdd\uff0c\u4fee\u6539\u65e5\u5fd7\u76ee\u5f55\u4e3aphp\uff0c\u5199\u5165\u4e00\u53e5\u8bdd<\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\"undefined\"<\/p>\n
<\/noscript><\/p>\n
\u94fe\u63a5\u8681\u5251\uff0c\u4e0a\u7ebfcs\u3002<\/p>\n
\"image-20211020160448473\"<\/p>\n
<\/noscript><\/p>\n
\"image-20211020160810570\"<\/p>\n
<\/noscript><\/p>\n","protected":false},"excerpt":{"rendered":"\u7b2c\u4e00\u5c42 WEB1 \u6253\u5f00\u4e4b\u540e\u662f\u4e00\u4e2aCMS \u626b\u63cf\u7aef\u53e3\u4e4b\u540e\u53d1\u73b0\u5f00\u653e\u4e863306\u6570\u636e\u5e93\uff0c\u548cFTP\u8fd9\u4e00\u7c7b\u3002\u8fd8\u6709\u4e00\u4e2a23\u6bb5\u7684IP \u626b\u63cf\u540e\u53f0\uff0c\u53d1\u73b0\u4e00\u4e2a\u524d\u53f0\u767b\u5f55\uff0c\u4e00\u4e2a\u540e\u53f0\u767b\u5f55\uff0c\u4e00\u4e2anews\u503c \u5c1d\u8bd5\u6ce8\u518c\u4e4b\u540e\u767b\u5f55 \u67e5\u4e86\u516c\u5f00HDH\u7684\u6f0f\u6d1e\uff0c\u51e0\u4e4e\u90fd\u6ca1\u6709\u516c\u5f00\uff0c\u610f\u5916\u7684\u53d1\u73b0…Read more \u00bb<\/a>","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[12],"tags":[],"class_list":["post-87","post","type-post","status-publish","format-standard","hentry","category-12"],"aioseo_notices":[],"_links":{"self":[{"href":"https:\/\/www.hm-zy.cn\/index.php?rest_route=\/wp\/v2\/posts\/87","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.hm-zy.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.hm-zy.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.hm-zy.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.hm-zy.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=87"}],"version-history":[{"count":1,"href":"https:\/\/www.hm-zy.cn\/index.php?rest_route=\/wp\/v2\/posts\/87\/revisions"}],"predecessor-version":[{"id":88,"href":"https:\/\/www.hm-zy.cn\/index.php?rest_route=\/wp\/v2\/posts\/87\/revisions\/88"}],"wp:attachment":[{"href":"https:\/\/www.hm-zy.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=87"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.hm-zy.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=87"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.hm-zy.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=87"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}