File Upload Vulnerability Check method

　　The first step is to search for a vulnerable blog

After finding any target, first of all to test the blog administrator to delete the upload Web program files, if the user has some security awareness, it is possible to delete the default upload page file, then it is not.

We choose "https://home.cnblogs.com", after adding "/upfile.asp" after the address, enter, if you see the prompt is "Microsoft VBScript runtime error error ' 800A01B6 '" information, Indicates that there is a file upload vulnerability in the blog site.

　　Step two, expand the attack.

Run the website upload and use tool, enter the address of the upfile.asp upload file in the "Submission address", and then specify the path to save after uploading the Trojan file in the "Upload path", which we usually save in the root directory of the website. The Path fields and file fields use the default settings, and in Allow types, enter the types of pictures that the blog system allows to upload. After "Local file", click "Browse" to select a local ASP trojan, you can choose the ocean top Trojan.

Now click the "Submit" button to upload the Trojan, if you see the message "1 file had been uploaded!", the file upload is successful. Next, we can connect the uploaded ASP Trojan to further infiltrate the attack, achieve the purpose of controlling the entire website server

File Upload Vulnerability Check method