Detection of a wp topic sales site

First, take a look at the side Station

There is a LANMP, which is an initial Page.

Try the default account and password provided by him. If there is a probe and phpinfo, collect the information first.

After learning about the basic situation, I targeted a DEDECMS. 5.7 of them may be injected. After testing, what's wrong with the character? Failed. Check the Update Time 2012.6. So, other stations are basically well-known CMS, and there have been no holes recently. At this moment, I came into being with an idea that has not passed through the brain and entered the background of dedecms, enter the default account password admin. Oh, my God. The character broke out at this moment. Come in !!

When you come in, upload the file quickly.

That is, it is OK to upload a jpg horse and then change it to php. But .....

Okay, upload and catch birds. How can this problem be solved. Write directly.

Then 1.php is generated. Creating a file doesn't work. You can only modify the index. Then, a php file is generated under the directory.

Cutting knife

The connection is successful, but the permission is very small. view the Bird Catcher In The wwwroot directory. According to the relationship between the folder and the domain name, I guess the website folder of the template team, but I had to go to shell to see it.

Shell is very powerful, the permission seems to be much larger than the previous one, but there is no written sentence, this is Mao? After analysis, it turns out that every website program is under the public_html folder under the corresponding folder. Everyone knows that the folder in linux is blue, but it is not displayed. I was shocked by the evil kitchen knife.

 

I wanted to check the kernel and raise the permission, but the corresponding exp does not seem to be found. In fact, it is not so troublesome.

I entered public_html and wrote the shell again, but it still failed. I got it. I don't have to worry about it. I compressed the template folder directly.

Download .....

43 M. So big, of course there are a lot of previous templates to achieve.

: