Penetration of Nancy College

Author: Left tear Blog: http://www.my0xsec.com/

Target Site: http://www.bkjia.com/(only to replace the target site, not this site)

ASPX site has no injection point
Go to the background to see weak passwords

I'm very disappointed. I tried N or more passwords and they didn't work ......
Continue to return to the foreground
Just find an image and check the attribute to find the path very familiar.

Probably, the editor tries to find the path.

The FCKeditor editor is available.
Check the vulnerability upload page and find that the page exists.

Upload restrictions cannot be broken through! Miserable!
Hey, keep searching!

I laughed at the second Upload Vulnerability!
Knife connection...

 

This article is published by left tears: Three years of song