Webshell in the background

I tried to find a background, Or I used to write a post. Here I will give you your username and password!

Admin appliedtek101.

Tool: wsockexpert.exe packet capture tool

Open the packet capture tool interface and you will see nothing. Then pay attention to the small folder icon on the left.

Then select the iexplore.exe, find the enterprise background management, and click open to set 1.

500) This. width = 500 "border = 0>

After clicking open, you cannot open anything. That's right, because you haven't uploaded

Go in and find a place where the article is published. You can rest assured that there is no database backup score. Then the Administrator is too '''okay. I found one. I uploaded the picture casually. 2 is displayed, if you do not necessarily see the upload, ''It is because the program settings are different.

500) This. width = 500 "border = 0>

The system prompts that the upload is successful ''' OK! Now let's capture the package to see if there is any change. Haha ''change is there ''' we should find post

The reason is not mentioned. It involves packet sending, receiving, and network protocols. ''' if you are interested, you can study ''' 3.

500) This. width = 500 "border = 0>

Click post and we can see the following content, post/upfilea. asp: http://www.appliedtek.com/uploada.asp, the two information is the address we want to upload on behalf

Here I will give a general explanation. Why do we have two addresses: uploada and upfilea! That one is a directory and a file. Of course, the file used is the address! And then copy the cookies and write them in the future.

URL: http://www.appliedtek.com/upfilea.asp

There are four options for opening mingkiddie. These four are all touch versions of large websites. The suffix of the upload address must match one of the above. The first one is definitely not good, because it is BBS, we select the second one, and then set 4

500) This. width = 500 "border = 0>

I chose a pony by myself. It seems that I can't bring it with my kid.