Common background uploads and shells

Sometimes it's time to go to the background, and shell may be your embarrassment. If there is an editor, let's talk about it in detail. In case the editor is a lite version or FCK with a vulnerability fix, you can only use some small upload points, but do not underestimate these upload points.

Whether or not the NC can be used for submission. In fact, the NC commit has been reversed. It is more concise to use operabrowser or suitbute. In general, under what circumstances can we use it like this? Look at the source code.

When filepath value = "upload" is displayed, It is refreshing. Try to modify value = "upload. asp ;"

If filename value = "1312321321" is displayed, try to modify value = "1312321321. asp"

If not, add a space or.