Use the Microsoft recycle bin to hide files

Creating or uploading a file to the recycle bin in webshell is always hidden and cannot be opened directly. You can view and run the file in DOS or webshell, And the recycle bin cannot clear the file. This vulnerability is very weak .. (Windows 7 xp can be used, but others are not tested)

We use webshell to create a folder in the Q: \ $ RECYCLE. BIN \ S-1-5-18 \
 



After saving the file, we can see that the file is 43 KB.
 
In the system, we cannot directly see the file.
 
The file cannot be run directly. The file size is 0 K.
Www.2cto.com
But it can be accessed directly in CMD and webshell. However, you cannot delete the file by clearing the recycle bin. This error exists in xp win7 (others are not tested)

Solution:

The younger brother also finds out by chance.

Author: ccrk