57uv6Z6g
MS4wLjABAAAA5qMD8Gzdcgq7HXUOviKB59i0-ybJ59jJvNzyaPt5XOsVNqP6DU7WLcoAXvdxvYdp💗
本站所有文章仅作技术研究,请勿非法破坏,请遵守相关法律法规,后果自负
【笔记】APT学习笔记
【笔记】YUM学习笔记
【笔记】Linux通过文件名颜色区分文件类型
【笔记】Linux系统信息信息收集
【笔记】SEToolkit学习笔记
【笔记】Beef XSS Framework 学习笔记
【漏洞】文件上传漏洞
【笔记】Java原生方法播放音频文件
【漏洞】文件包含漏洞
前言
A File Inclusion Vulnerability is a type of web vulnerability that is most commonly found to affect web applications that rely on a scripting run time. This issue is caused when an application builds a path to executable code using an attacker-controlled variable in a way that allows the attacker to control which file is executed at run time.(维基百科)
A directory traversal, path traversal, or dot-dot-slash attack exploits insufficient security validation or sanitization of user-supplied file names, such that characters representing “traverse to parent directory” are passed through to the operating system’s file system API. An affected application can be exploited to gain unauthorized access to the file system.(维基百科)