danny/code-audit
1
0
Fork 0
mirror of https://gitee.com/gaohongy/code-audit.git synced 2026-07-16 08:23:50 +00:00
Code Issues Packages Projects Releases Wiki Activity

修正图片引用

Browse Source
This commit is contained in:
高宏宇
2025-10-30 17:59:27 +08:00
parent 0d7f6f0374
commit b53132af22
2 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
第五章/01.md
+2 -2
View File
@@ -71,7 +71,7 @@
运行结果： 运行结果：
![image-20251021092027968](/media/danny/Data/CUIT/代码审计/第五章/img/image-20251021092027968.png) ![image-20251021092027968](img/image-20251021092027968.png)
### 1.1.3. 远程文件包含RFI ### 1.1.3. 远程文件包含RFI
@@ -118,7 +118,7 @@ http://localhost/2020CodeAudit/C5/include/remoteinclude.php?url=php://input
F12打开Edge的调试模式。 F12打开Edge的调试模式。
![image-20251021101739615](/media/danny/Data/CUIT/代码审计/第五章/img/image-20251021101739615.png) ![image-20251021101739615](img/image-20251021101739615.png)
1. 选择请求类型 POST 1. 选择请求类型 POST
2. 输入URL：http://localhost/2020CodeAudit/C5/include/remoteinclude.php?url=php://input 2. 输入URL：http://localhost/2020CodeAudit/C5/include/remoteinclude.php?url=php://input
第六章/01.md
+3 -3
View File
@@ -381,7 +381,7 @@ insert into tables(1,2) values('xx',0x3c7363726970743e616c6572742831293c2f736369
insert into userinfo(username,PASSWORD, email) values('xx',0x3c7363726970743e616c6572742831293c2f73636970743e,'a'); insert into userinfo(username,PASSWORD, email) values('xx',0x3c7363726970743e616c6572742831293c2f73636970743e,'a');
``` ```
![image-20251023142651626](/media/danny/Data/CUIT/代码审计/第六章/img/image-20251023142651626.png) ![image-20251023142651626](img/image-20251023142651626.png)
双等于和三等于 双等于和三等于
@@ -459,7 +459,7 @@ if(file_exists('install.lock'){
还有一种是以重复发包来利用时间差，以少量的钱多次购买。 还有一种是以重复发包来利用时间差，以少量的钱多次购买。
![image-20251023144200551](/media/danny/Data/CUIT/代码审计/第六章/img/image-20251023144200551.png) ![image-20251023144200551](img/image-20251023144200551.png)
## 2.2. Ecshop逻辑错误注入 ## 2.2. Ecshop逻辑错误注入
@@ -559,7 +559,7 @@ http://localhost/ECshop/respond.php?code=alipay&subject=0&out_trade_no=%00' and
另外，浮现该漏洞需要打开后台的支付宝功能。 另外，浮现该漏洞需要打开后台的支付宝功能。
![image-20251023165548260](/media/danny/Data/CUIT/代码审计/第六章/img/image-20251023165548260.png) ![image-20251023165548260](img/image-20251023165548260.png)
# 3. 会话认证漏洞 # 3. 会话认证漏洞