某期三个白帽，某牛的出的题被秒，他利用过滤黑名单的方式防止上传。做题的人就是直接上传phtml绕过黑名单的， 但是我之前还不知道phtml还被能解析成php。
于是我本地测试，却发现我本地的phtml后缀解析不了。我本地的环境phpstudy集成环境。
我然后又在我的kali虚拟机里面测试，发现可以解析phtml。当时感觉好奇怪于是我就翻了翻了我kali里面的apache配置文件
kali是debian系的，/etc/apache2的目录下就是apache2的所有配置文件
其中apache2.conf是主要的配置文件，*-enabled表示在是用的配置，*-available表示是可用的配置。
我们来看看apache2.conf中的配置。
在文件的尾部包含了包含了模块的配置，而php5模块配置就是在mods-enabled里面
可看见php5.conf是../mods-available/php5.conf的软连接。看看php5.conf
终于找到原因啦，只要符合这个正则的后缀名都可以被当做php文件执行。符合的后缀包括 php、php3、php4、php5、phtml、pht 等
后来我还去测试了其他的一些apache+php的环境
windows
phpstudy和wamp两个集成环境
linux
ubuntu、debian和centos用源的方式安装lamp.(apt-get和yum)
结果
phpstudy和wamp以及centos用yum方式安装的lamp环境不能解析 phtml和pht
ubuntu和debian利用apt-get方式安装的lamp环境就能解析 phtml和pht ， 原因和上图分析是一样的 。
备注
利用这些环境特性和黑名单就能绕过限制，达到上传webshell的目的，在平常渗透测试当中也许会是一个突破点
What is PDO in PHP?Apr 28, 2025 pm 04:51 PMThe article discusses PHP Data Objects (PDO), an extension for database access in PHP. It highlights PDO's role in enhancing security through prepared statements and its benefits over MySQLi, including database abstraction and better error handling.
What is Memcache and Memcached in PHP? Is it possible to share a single instance of a Memcache between several projects of PHP?Apr 28, 2025 pm 04:47 PMMemcache and Memcached are PHP caching systems that speed up web apps by reducing database load. A single instance can be shared among projects with careful key management.
What is PEAR in PHP?Apr 28, 2025 pm 04:38 PMPEAR is a PHP framework for reusable components, enhancing development with package management, coding standards, and community support.
What are the uses of PHP?Apr 28, 2025 pm 04:37 PMPHP is a versatile scripting language used mainly for web development, creating dynamic pages, and can also be utilized for command-line scripting, desktop apps, and API development.
What was the old name of PHP?Apr 28, 2025 pm 04:36 PMThe article discusses PHP's evolution from "Personal Home Page Tools" in 1995 to "PHP: Hypertext Preprocessor" in 1998, reflecting its expanded use beyond personal websites.
How can you prevent session fixation attacks?Apr 28, 2025 am 12:25 AMEffective methods to prevent session fixed attacks include: 1. Regenerate the session ID after the user logs in; 2. Use a secure session ID generation algorithm; 3. Implement the session timeout mechanism; 4. Encrypt session data using HTTPS. These measures can ensure that the application is indestructible when facing session fixed attacks.
How do you implement sessionless authentication?Apr 28, 2025 am 12:24 AMImplementing session-free authentication can be achieved by using JSONWebTokens (JWT), a token-based authentication system where all necessary information is stored in the token without server-side session storage. 1) Use JWT to generate and verify tokens, 2) Ensure that HTTPS is used to prevent tokens from being intercepted, 3) Securely store tokens on the client side, 4) Verify tokens on the server side to prevent tampering, 5) Implement token revocation mechanisms, such as using short-term access tokens and long-term refresh tokens.
What are some common security risks associated with PHP sessions?Apr 28, 2025 am 12:24 AMThe security risks of PHP sessions mainly include session hijacking, session fixation, session prediction and session poisoning. 1. Session hijacking can be prevented by using HTTPS and protecting cookies. 2. Session fixation can be avoided by regenerating the session ID before the user logs in. 3. Session prediction needs to ensure the randomness and unpredictability of session IDs. 4. Session poisoning can be prevented by verifying and filtering session data.
Hot AI Tools
Undresser.AI Undress
AI-powered app for creating realistic nude photos
AI Clothes Remover
Online AI tool for removing clothes from photos.
Undress AI Tool
Undress images for free
Clothoff.io
AI clothes remover
Video Face Swap
Swap faces in any video effortlessly with our completely free AI face swap tool!
Hot Article
Hot Tools
EditPlus Chinese cracked version
Small size, syntax highlighting, does not support code prompt function
SublimeText3 Chinese version
Chinese version, very easy to use
MinGW - Minimalist GNU for Windows
This project is in the process of being migrated to osdn.net/projects/mingw, you can continue to follow us there. MinGW: A native Windows port of the GNU Compiler Collection (GCC), freely distributable import libraries and header files for building native Windows applications; includes extensions to the MSVC runtime to support C99 functionality. All MinGW software can run on 64-bit Windows platforms.
mPDF
mPDF is a PHP library that can generate PDF files from UTF-8 encoded HTML. The original author, Ian Back, wrote mPDF to output PDF files "on the fly" from his website and handle different languages. It is slower than original scripts like HTML2FPDF and produces larger files when using Unicode fonts, but supports CSS styles etc. and has a lot of enhancements. Supports almost all languages, including RTL (Arabic and Hebrew) and CJK (Chinese, Japanese and Korean). Supports nested block-level elements (such as P, DIV),
DVWA
Damn Vulnerable Web App (DVWA) is a PHP/MySQL web application that is very vulnerable. Its main goals are to be an aid for security professionals to test their skills and tools in a legal environment, to help web developers better understand the process of securing web applications, and to help teachers/students teach/learn in a classroom environment Web application security. The goal of DVWA is to practice some of the most common web vulnerabilities through a simple and straightforward interface, with varying degrees of difficulty. Please note that this software
