Phpnow Preparation Guide

Phpnow Construction Guide

Experimental Background :

Search the cross-site script from Wikipedia to interpret the cross-region script (cross-zone? Scripting or cross ? Site? Scripting) refers to the browser to exploit some of the vulnerabilities of the security solution, such an attack that does not have permission to cross-site scripts without authorization to execute with high permissions, the execution rights of the script is the client (Web Browser ) to expand the upgrade. ?
these XSS Cross-site scripting vulnerabilities could be: ?
* Web Browser design flaws in a certain condition, a site fully trust another high-privileged site ( or even a high-low permission area ) and to execute the script of a highly privileged site. ?
* Web browser configuration error, put unsafe sites in the browser high Trust list. ?
* Cross-site scripting vulnerability exists in Trusted sites ( Privileged Zones ) ?
A typical cross-site scripting attack consists of two steps. The first is to use a cross-site scripting vulnerability to execute an attacker-constructed script in a privileged mode, and then take advantage of unsafe ActiveX controls to perform malicious behavior. Usually in quiet mode, the computer browses the attacker-specified webpage to silently download and install various malicious code, such as spyware, Trojan Horse software, worms, etc.

Lab Environment:

P The HO? Now the building of the environment

for most students, , this The phpnow environment is not a very difficult thing to do, depending on the operating system that the students use. For win?8 or? WIN8.1 students, this is a problem to be aware of.

generally , There are a few questions. :

one,? a lot of students used to pretend before. Phpnow or incorrectly installed, and then deleted the entire folder directly. This will cause the remaining registry keys or sub-processes to run in the background, which requires a forced uninstallation. By using the pncp.cmd below the phpnow folder, select . Forcibly terminates the process and unloads it so that the entire software can be uninstalled completely and then reinstalled

?

two,? The second problem is, but for the use of win 8 or win8.1 's classmates often encounter problems . There are two reasons why:one is that the server name is already in use,one that requires administrator privileges,Here we use the following workaround:

a) ? one is after forced unloading , restart your computer and try again.

b) ? Second, right-click in the lower right corner of the computer command Prompt (Administrator), enter the phpnow folder directory in the open cmd window and run the setup.cmd , this time again according to the instructions can be installed to complete. The procedure is similar to Linux and is very simple and will not be mentioned.

?

Remember to set your own password here. , Don't forget , after that, the entire software installation was completed. .

reference from :? http://jingyan.baidu.com/article/cb5d61050c9ce6005d2fe040.html

Experimental Process :

Open Browser , input 127.0.0.1, open

?

input 127.0.0.1/a.js, the following interface appears

?

?

Open the URL you found before

Get rid of what's behind, enter

?

?

Can be in access.log inside get such content, because the website will transcode itself, so can't read directly, need further transcoding can

