inurl:updown.php | intext:"Powered by PHP Uploader Downloader"

  • 日期:2006-02-28
  • 类别:
  • 作者:anonymous
  • 语法:inurl:updown.php | intext:"Powered by PHP Uploader Downloader"
  • this (evil ) script lets you to upload a php shell on target server, in most cases not password protected dork: inurl:updown.php | intext:"Powered by PHP Uploader Downloader" a note: sometimes you don't see a link to a list of uploaded files... just switch to http://[target]/[path]/updown.php?action=download