滲透測試技巧總結更新篇2

技術小美發表於2017-11-08
.LINUX常見路徑：

/etc/passwd
/etc/shadow
/etc/fstab
/etc/host.conf
/etc/motd
/etc/ld.so.conf
/var/www/htdocs/index.php
/var/www/conf/httpd.conf
/var/www/htdocs/index.html
/var/httpd/conf/php.ini
/var/httpd/htdocs/index.php
/var/httpd/conf/httpd.conf
/var/httpd/htdocs/index.html
/var/httpd/conf/php.ini
/var/www/index.html
/var/www/index.php
/opt/www/conf/httpd.conf
/opt/www/htdocs/index.php
/opt/www/htdocs/index.html
/usr/local/apache/htdocs/index.html
/usr/local/apache/htdocs/index.php
/usr/local/apache2/htdocs/index.html
/usr/local/apache2/htdocs/index.php
/usr/local/httpd2.2/htdocs/index.php
/usr/local/httpd2.2/htdocs/index.html
/tmp/apache/htdocs/index.html
/tmp/apache/htdocs/index.php
/etc/httpd/htdocs/index.php
/etc/httpd/conf/httpd.conf
/etc/httpd/htdocs/index.html
/www/php/php.ini
/www/php4/php.ini
/www/php5/php.ini
/www/conf/httpd.conf
/www/htdocs/index.php
/www/htdocs/index.html
/usr/local/httpd/conf/httpd.conf
/apache/apache/conf/httpd.conf
/apache/apache2/conf/httpd.conf
/etc/apache/apache.conf
/etc/apache2/apache.conf
/etc/apache/httpd.conf
/etc/apache2/httpd.conf
/etc/apache2/vhosts.d/00_default_vhost.conf
/etc/apache2/sites-available/default
/etc/phpmyadmin/config.inc.php
/etc/mysql/my.cnf
/etc/httpd/conf.d/php.conf
/etc/httpd/conf.d/httpd.conf
/etc/httpd/logs/error_log
/etc/httpd/logs/error.log
/etc/httpd/logs/access_log
/etc/httpd/logs/access.log
/home/apache/conf/httpd.conf
/home/apache2/conf/httpd.conf
/var/log/apache/error_log
/var/log/apache/error.log
/var/log/apache/access_log
/var/log/apache/access.log
/var/log/apache2/error_log
/var/log/apache2/error.log
/var/log/apache2/access_log
/var/log/apache2/access.log
/var/www/logs/error_log
/var/www/logs/error.log
/var/www/logs/access_log
/var/www/logs/access.log
/usr/local/apache/logs/error_log
/usr/local/apache/logs/error.log
/usr/local/apache/logs/access_log
/usr/local/apache/logs/access.log
/var/log/error_log
/var/log/error.log
/var/log/access_log
/var/log/access.log
/usr/local/apache/logs/access_logaccess_log.old
/usr/local/apache/logs/error_logerror_log.old
/etc/php.ini
/bin/php.ini
/etc/init.d/httpd
/etc/init.d/mysql
/etc/httpd/php.ini
/usr/lib/php.ini
/usr/lib/php/php.ini
/usr/local/etc/php.ini
/usr/local/lib/php.ini
/usr/local/php/lib/php.ini
/usr/local/php4/lib/php.ini
/usr/local/php4/php.ini
/usr/local/php4/lib/php.ini
/usr/local/php5/lib/php.ini
/usr/local/php5/etc/php.ini
/usr/local/php5/php5.ini
/usr/local/apache/conf/php.ini
/usr/local/apache/conf/httpd.conf
/usr/local/apache2/conf/httpd.conf
/usr/local/apache2/conf/php.ini
/etc/php4.4/fcgi/php.ini
/etc/php4/apache/php.ini
/etc/php4/apache2/php.ini
/etc/php5/apache/php.ini
/etc/php5/apache2/php.ini
/etc/php/php.ini
/etc/php/php4/php.ini
/etc/php/apache/php.ini
/etc/php/apache2/php.ini
/web/conf/php.ini
/usr/local/Zend/etc/php.ini
/opt/xampp/etc/php.ini
/var/local/www/conf/php.ini
/var/local/www/conf/httpd.conf
/etc/php/cgi/php.ini
/etc/php4/cgi/php.ini
/etc/php5/cgi/php.ini
/php5/php.ini
/php4/php.ini
/php/php.ini
/PHP/php.ini
/apache/php/php.ini
/xampp/apache/bin/php.ini
/xampp/apache/conf/httpd.conf
/NetServer/bin/stable/apache/php.ini
/home2/bin/stable/apache/php.ini
/home/bin/stable/apache/php.ini
/var/log/mysql/mysql-bin.log
/var/log/mysql.log
/var/log/mysqlderror.log
/var/log/mysql/mysql.log
/var/log/mysql/mysql-slow.log
/var/mysql.log
/var/lib/mysql/my.cnf
/usr/local/mysql/my.cnf
/usr/local/mysql/bin/mysql
/etc/mysql/my.cnf
/etc/my.cnf
/usr/local/cpanel/logs
/usr/local/cpanel/logs/stats_log
/usr/local/cpanel/logs/access_log
/usr/local/cpanel/logs/error_log
/usr/local/cpanel/logs/license_log
/usr/local/cpanel/logs/login_log
/usr/local/cpanel/logs/stats_log
/usr/local/share/examples/php4/php.ini
/usr/local/share/examples/php/php.ini

2..windows常見路徑（可以將c盤換成d,e盤,比如星外虛擬主機跟華眾得,一般都放在d盤）

c:windowsphp.ini
c:oot.ini
c:1.txt
c:a.txt

c:CMailServerconfig.ini
c:CMailServerCMailServer.exe
c:CMailServerWebMailindex.asp
c:program filesCMailServerCMailServer.exe
c:program filesCMailServerWebMailindex.asp
C:WinWebMailSysInfo.ini
C:WinWebMailWebdefault.asp
C:WINDOWSFreeHost32.dll
C:WINDOWS7i24iislog4.exe
C:WINDOWS7i24tool.exe

c:hzhostdatabasesurl.asp

c:hzhosthzclient.exe
C:Documents and SettingsAll Users「開始」選單程式7i24虛擬主機管理平臺自動設定[受控端].lnk

C:Documents and SettingsAll Users「開始」選單程式Serv-UServ-U Administrator.lnk
C:WINDOWSweb.config
c:webindex.html
c:wwwindex.html
c:WWWROOTindex.html
c:websiteindex.html
c:webindex.asp
c:wwwindex.asp
c:wwwsiteindex.asp
c:WWWROOTindex.asp
c:webindex.php
c:wwwindex.php
c:WWWROOTindex.php
c:WWWsiteindex.php
c:webdefault.html
c:wwwdefault.html
c:WWWROOTdefault.html
c:websitedefault.html
c:webdefault.asp
c:wwwdefault.asp
c:wwwsitedefault.asp
c:WWWROOTdefault.asp
c:webdefault.php
c:wwwdefault.php
c:WWWROOTdefault.php
c:WWWsitedefault.php
C:Inetpubwwwrootpagerror.gif
c:windows
otepad.exe
c:winnt
otepad.exe
C:Program FilesMicrosoft OfficeOFFICE10winword.exe
C:Program FilesMicrosoft OfficeOFFICE11winword.exe
C:Program FilesMicrosoft OfficeOFFICE12winword.exe
C:Program FilesInternet ExplorerIEXPLORE.EXE
C:Program Fileswinrar
ar.exe
C:Program Files360360Safe360safe.exe
C:Program Files360Safe360safe.exe
C:Documents and SettingsAdministratorApplication Data360Safe360Examine360Examine.log
c:
avbinstore.ini
c:
ising.ini
C:Program FilesRisingRavRsTask.xml
C:Documents and SettingsAll UsersStart Menudesktop.ini
C:Documents and SettingsAdministratorMy DocumentsDefault.rdp
C:Documents and SettingsAdministratorCookiesindex.dat
C:Documents and SettingsAdministratorMy Documents新建 文字文件.txt
C:Documents and SettingsAdministrator桌面新建 文字文件.txt
C:Documents and SettingsAdministratorMy Documents1.txt
C:Documents and SettingsAdministrator桌面1.txt
C:Documents and SettingsAdministratorMy Documentsa.txt
C:Documents and SettingsAdministrator桌面a.txt
C:Documents and SettingsAll UsersDocumentsMy PicturesSample PicturesBlue hills.jpg
E:Inetpubwwwrootaspnet_clientsystem_web1_1_4322SmartNav.htm
C:Program FilesRhinoSoft.comServ-UVersion.txt
C:Program FilesRhinoSoft.comServ-UServUDaemon.ini
C:Program FilesSymantecSYMEVENT.INF
C:Program FilesMicrosoft SQL Server80ToolsBinnsqlmangr.exe
C:Program FilesMicrosoft SQL ServerMSSQLDatamaster.mdf
C:Program FilesMicrosoft SQL ServerMSSQL.1MSSQLDatamaster.mdf
C:Program FilesMicrosoft SQL ServerMSSQL.2MSSQLDatamaster.mdf
C:Program FilesMicrosoft SQL Server80ToolsHTMLdatabase.htm
C:Program FilesMicrosoft SQL ServerMSSQLREADME.TXT
C:Program FilesMicrosoft SQL Server90ToolsBinDdsShapes.dll
C:Program FilesMicrosoft SQL ServerMSSQLsqlsunin.ini
C:MySQLMySQL Server 5.0my.ini
C:Program FilesMySQLMySQL Server 5.0my.ini
C:Program FilesMySQLMySQL Server 5.0datamysqluser.frm
C:Program FilesMySQLMySQL Server 5.0COPYING
C:Program FilesMySQLMySQL Server 5.0sharemysql_fix_privilege_tables.sql
C:Program FilesMySQLMySQL Server 4.1inmysql.exe
c:MySQLMySQL Server 4.1inmysql.exe
c:MySQLMySQL Server 4.1datamysqluser.frm
C:Program FilesOracleoraconfigLpk.dll
C:WINDOWSMicrosoft.NETFrameworkv2.0.50727aspnet_state.exe
C:WINDOWSsystem32inetsrvw3wp.exe
C:WINDOWSsystem32inetsrvinetinfo.exe
C:WINDOWSsystem32inetsrvMetaBase.xml
C:WINDOWSsystem32inetsrviisadmpwdachg.asp
C:WINDOWSsystem32configdefault.LOG
C:WINDOWSsystem32configsam
C:WINDOWSsystem32configsystem
c:CMailServerconfig.ini
c:program filesCMailServerconfig.ini
c: omcat6 omcat6inversion.sh
c: omcat6inversion.sh
c: omcatinversion.sh
c:program files omcat6inversion.sh
C:Program FilesApache Software FoundationTomcat 6.0inversion.sh
c:Program FilesApache Software FoundationTomcat 6.0logsisapi_redirect.log
c:Apache2Apache2inApache.exe
c:Apache2inApache.exe
c:Apache2phplicense.txt
C:Program FilesApache GroupApache2inApache.exe
/usr/local/tomcat5527/bin/version.sh
/usr/share/tomcat6/bin/startup.sh
/usr/tomcat6/bin/startup.sh
c:Program FilesQQ2007qq.exe
c:Program FilesTencentqqUser.db
c:Program FilesTencentqqqq.exe
c:Program FilesTencentqqinqq.exe
c:Program FilesTencentqq2009qq.exe
c:Program FilesTencentqq2008qq.exe
c:Program FilesTencentqq2010inqq.exe
c:Program FilesTencentqqUsersAll UsersRegistry.db
C:Program FilesTencentTMTMDllsQQZip.dll
c:Program FilesTencentTmBinTxplatform.exe
c:Program FilesTencentRTXServerAppConfig.xml
C:Program FilesFoxmalFoxmail.exe
C:Program FilesFoxmalaccounts.cfg
C:Program Files encentFoxmalFoxmail.exe
C:Program Files encentFoxmalaccounts.cfg
C:Program FilesLeapFTP 3.0LeapFTP.exe
C:Program FilesLeapFTPLeapFTP.exe
c:Program FilesGlobalSCAPECuteFTP Procftppro.exe
c:Program FilesGlobalSCAPECuteFTP Pro
otes.txt
C:Program FilesFlashFXPFlashFXP.ini
C:Program FilesFlashFXPflashfxp.exe
c:Program FilesOraclein
egsvr32.exe
c:Program Files騰訊遊戲QQGAME
eadme.txt
c:Program Files encent騰訊遊戲QQGAME
eadme.txt
c:Program Files encentQQGAME
eadme.txt
C:Program FilesStormIIStorm.exe

3.網站相對路徑:

/config.php
../../config.php
../config.php
../../../config.php
/config.inc.php
./config.inc.php
../../config.inc.php
../config.inc.php
../../../config.inc.php
/conn.php
./conn.php
../../conn.php
../conn.php
../../../conn.php
/conn.asp
./conn.asp
../../conn.asp
../conn.asp
../../../conn.asp
/config.inc.php
./config.inc.php
../../config.inc.php
../config.inc.php
../../../config.inc.php
/config/config.php
../../config/config.php
../config/config.php
../../../config/config.php
/config/config.inc.php
./config/config.inc.php
../../config/config.inc.php
../config/config.inc.php
../../../config/config.inc.php
/config/conn.php
./config/conn.php
../../config/conn.php
../config/conn.php
../../../config/conn.php
/config/conn.asp
./config/conn.asp
../../config/conn.asp
../config/conn.asp
../../../config/conn.asp
/config/config.inc.php
./config/config.inc.php
../../config/config.inc.php
../config/config.inc.php
../../../config/config.inc.php
/data/config.php
../../data/config.php
../data/config.php
../../../data/config.php
/data/config.inc.php
./data/config.inc.php
../../data/config.inc.php
../data/config.inc.php
../../../data/config.inc.php
/data/conn.php
./data/conn.php
../../data/conn.php
../data/conn.php
../../../data/conn.php
/data/conn.asp
./data/conn.asp
../../data/conn.asp
../data/conn.asp
../../../data/conn.asp
/data/config.inc.php
./data/config.inc.php
../../data/config.inc.php
../data/config.inc.php
../../../data/config.inc.php
/include/config.php
../../include/config.php
../include/config.php
../../../include/config.php
/include/config.inc.php
./include/config.inc.php
../../include/config.inc.php
../include/config.inc.php
../../../include/config.inc.php
/include/conn.php
./include/conn.php
../../include/conn.php
../include/conn.php
../../../include/conn.php
/include/conn.asp
./include/conn.asp
../../include/conn.asp
../include/conn.asp
../../../include/conn.asp
/include/config.inc.php
./include/config.inc.php
../../include/config.inc.php
../include/config.inc.php
../../../include/config.inc.php
/inc/config.php
../../inc/config.php
../inc/config.php
../../../inc/config.php
/inc/config.inc.php
./inc/config.inc.php
../../inc/config.inc.php
../inc/config.inc.php
../../../inc/config.inc.php
/inc/conn.php
./inc/conn.php
../../inc/conn.php
../inc/conn.php
../../../inc/conn.php
/inc/conn.asp
./inc/conn.asp
../../inc/conn.asp
../inc/conn.asp
../../../inc/conn.asp
/inc/config.inc.php
./inc/config.inc.php
../../inc/config.inc.php
../inc/config.inc.php
../../../inc/config.inc.php
/index.php
./index.php
../../index.php
../index.php
../../../index.php
/index.asp
./index.asp
../../index.asp
../index.asp

../../../index.asp


















本文轉hackfreer51CTO部落格，原文連結：http://blog.51cto.com/pnig0s1992/447556，如需轉載請自行聯絡原作者


相關文章