Hacking Book | Free Online Hacking Learning

Home

tengzhangchao / searchwebpath: determine the physical path address of the website where the url is based on the website url.

Posted by agaran at 2020-03-02
all

Python

Clone with HTTPS

Use Git or checkout with SVN using the web URL.

Fetching latest commit…

Cannot retrieve the latest commit at this time.

README.md

Function

According to the website URL (http://www.xxx.com/a/b/c? Id = 1), determine the physical path address of the website where the URL is located (C: / Web / CMS / A / B / C)

Application scenario: the system command can be executed by using the vulnerability, but the physical path of the website is not known. At this time, the script can be uploaded to run out of the physical path of the website and write a Trojan horse.

Usage

Python source file

Windows green

Linux green

Parameter

For details, please refer to the blog: searchwebpath

@2017.03.10