[hack] ʪǡ¤
ե
̾ | ||
---|---|---|
ڡե | CGI | 桼פڡƤΤޤݻƥ |
źեե | CGI | źեե롣ե̾ʳ̵ù |
ե | CGI | źեեΰηǺ |
ե | CGI | 1ĤΤߡѿ:ͷǡƤݻ |
ץ饰 | FTP | 桼ˤǥ쥯ȥ() |
Υץ | FTP | 桼ˤꡢǤդ CGI ¹Բǽǥ쥯ȥ֤롣 |
ΥץȤơǥ쥯ȥ֤롣 ޤʳΥեϡ§ʤ
ץ饰Ѥե⡢ڡե롢뤤źեեηǺ ֥饦ͳǥ桼ѹǤ뤳Ȥݾڤ롣
ե̾hhhhhhh__00aaaaaa
- hhhhhhh
- 16 ASCII ڡ̾perl unpack('h*',ڡ̾) 롣
- aaaaaaa
- 16 ASCII perl unpack('h*',̾) 롣
ե뼫Τ 0 Х
ե
ǰĤΤ¸ߤ 1.0.1 ޤǤΥե̾ ֥ǥ쥯ȥ/__0716373777f62746 ʸ츻 '__' . unpack('h*','password') η̡ˡ 1.0.2 ʹߤϡ֥ǥ쥯ȥ/index.cgiפѤäƤ롣
- (ե)
- = { (ѿ̾) + (TAB) + () + (ԥ) }η֤ + EOF
- (ѿ̾)
- = { (ʸ) } η֤
- ()
- ͤξ ̤0סNGפʳϿ
- ƥȤξ ƥȤΤޤޡ å(^) ^y , ԥ(LF) ^n , (CR) ^r , ֥(TAB) ^t ִƤ롣
- ܥեΤߡѡߥå(ƥ)θɬ
- ԤνϲǤ褷
- ̤βϡƤȤ˲
- ѿ̾ˤϡ֤̾äߤƤʤ
- ѤƤѿȤƤϲ(ƤǤϤʤ)
ѿ̾ | ||
---|---|---|
crypt | ƥ | crypt(,'wk') ǰŹ沽ѥ |
sitename | ƥ | ̾(EUC) |
locallink | file:// Υͭˤ뤫 | |
CSS | ƥ | CSS Υڡ̾ |
sectionmark | ƥ | ɸƬΥޡ |
target | ƥ | ؤ target ° |
|