Unexpected method to get webshell

By: 77600145
Copyright: 3EST Information Security Team

I. Cause
Today, I did my graduation project and discussed the webshell issue of a website in the group on the way. All said they couldn't take it down and joined the discussion queue. Read the websiteYesterday PMUploadDownload Attachment (140.67 KB)

Log on to the background

I think there is a backup, so I don't want to use it. Otherwise, how can we discuss it!

2. Lost

No matter what type of horse you upload, including one-sentence encrypted jpg format, you cannot upload

Yesterday PMUpload Download Attachment (37.56 KB)

But there is a backup to see if you can back up a sentence.

Backup failed

It seems stuck here.


Iii. Transfer
Suddenly I saw this

What is the purpose of this? Haha, why can't I find the database path after the backup? You can use it to find out if you can jump

Haha, the root directory is successfully redirected.

Let's look at the data directory.

Haha, see it. The database is shop. asp.

4. Breakthrough

A decisive sentence,

Kitchen Knife connection

Send one sentence address to the group

Continue the graduation design