The method is simple. We know that files are generally used in ASP.
<! -- # Include virtual = "/file. asp" -->
<! -- # Include file = "file. asp" -->
Two Methods: Through the STM file, the ASP file can be directly storedSource codeOutput directly to the client browser.
Requirements:
1. The server must have shtml script ing
2. You can write a. STM/. shtm/. shtml suffix file to the server.
3. Check the file name and relative location.
Example:
Write the test. stm file to the server directory
<! -- # Include virtual = "/news/index. asp" -->
Or
<! -- # Include file = "index. asp" -->
Note: When "virtual =" is used, you must specify the relative location of the file for the root. When "file =" is used, you must specify the file for the upload directory, that is, test. the relative position of the STM.
Enter _ blank> http://www.xxx.com/news/test.htm in the browser to check the sourceCodeYou can see the source code of the index. asp file. Of course, we can also write multiple files to view the source code of multiple files at a time.
There are also many friends who use this method to attack and view the contents of files such as Conn to obtain the same database location! I am using it flexibly!