You are here: hacking technology > invades the examination > Content
Hot Articles
Recommend Articles
New Articles
Bypasses the web key words the monitoring test
  Add date: 07/09/2008   Publishing date: 07/09/2008   Hits: 7
Question: under the win2003+php environment, server has installed similarly “the first-class information supervisory system” the gadget, carries on the interception to some hypothesis's key words. Therefore I carries out the sql inquiry and the system order when phpshell, is prompted the document non-jurisdiction to visit.

The solution considered:

1.mysql-front phphttp proxy function

Company technology engineer has provided this method to me. He introduced that said mysql-front starts in 3.2 editions to provide a script, supports the proxy.

Application method: Has the php document under the program list. We upload it to the meat chicken web table of contents under. This locality disposes as follows



Like this on ok.

The test result is: 3.2 edition's companies receive a telegram wrong. Update 4.0 may succeed the connection, but because must registers the version, the function is limited. Operates not ideally.

Plan 2: From writes php script select, update….And so on inquiry which intercepts is needed the word to solidify in inside.

This very good understood that here supervisory system is only intercepts in the client side form submission data the sensitive key word. We the character which intercepts are written these inside the script, does not let it appear then bypasses in the form.

Finally: Success!

Plan 3: Grasps wraps phpshell to carry on the inquiry, and is intercepted the sentence, carries on to it transforms (replace, code…)

This present does not have to solve the problem very well.
Prev:Only opens 80 port's safe examinations about the main engine Next:Bypasses the CallStack forge return address examination

Comment:

Category: Home > invades the examination