├── README.md ├── allow_url_fopen 和 allow_url_include.md ├── bypass disable_functions.md ├── escapeshellarg 和 escapeshellcmd 函数.md ├── filter_var函数缺陷.md ├── open_basedir 研究.md ├── other.md ├── parse_url 函数trick.md ├── php mail函数.md ├── 代码审计圈 ├── linux 下通配符的技巧.md ├── some-articles.md └── 经典漏洞形式－－上传后删除.md ├── 危险的file_put_contents函数.md ├── 宽字节注入及数据库编码分析.md ├── 特殊的文件写入技巧.md └── 通用代码审计思路.md /README.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jiangsir404/Audit-Learning/HEAD/README.md -------------------------------------------------------------------------------- /allow_url_fopen 和 allow_url_include.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jiangsir404/Audit-Learning/HEAD/allow_url_fopen 和 allow_url_include.md -------------------------------------------------------------------------------- /bypass disable_functions.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jiangsir404/Audit-Learning/HEAD/bypass disable_functions.md -------------------------------------------------------------------------------- /escapeshellarg 和 escapeshellcmd 函数.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jiangsir404/Audit-Learning/HEAD/escapeshellarg 和 escapeshellcmd 函数.md -------------------------------------------------------------------------------- /filter_var函数缺陷.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jiangsir404/Audit-Learning/HEAD/filter_var函数缺陷.md -------------------------------------------------------------------------------- /open_basedir 研究.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jiangsir404/Audit-Learning/HEAD/open_basedir 研究.md -------------------------------------------------------------------------------- /other.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jiangsir404/Audit-Learning/HEAD/other.md -------------------------------------------------------------------------------- /parse_url 函数trick.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jiangsir404/Audit-Learning/HEAD/parse_url 函数trick.md -------------------------------------------------------------------------------- /php mail函数.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jiangsir404/Audit-Learning/HEAD/php mail函数.md -------------------------------------------------------------------------------- /代码审计圈/linux 下通配符的技巧.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jiangsir404/Audit-Learning/HEAD/代码审计圈/linux 下通配符的技巧.md -------------------------------------------------------------------------------- /代码审计圈/some-articles.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jiangsir404/Audit-Learning/HEAD/代码审计圈/some-articles.md -------------------------------------------------------------------------------- /代码审计圈/经典漏洞形式－－上传后删除.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jiangsir404/Audit-Learning/HEAD/代码审计圈/经典漏洞形式－－上传后删除.md -------------------------------------------------------------------------------- /危险的file_put_contents函数.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jiangsir404/Audit-Learning/HEAD/危险的file_put_contents函数.md -------------------------------------------------------------------------------- /宽字节注入及数据库编码分析.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jiangsir404/Audit-Learning/HEAD/宽字节注入及数据库编码分析.md -------------------------------------------------------------------------------- /特殊的文件写入技巧.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jiangsir404/Audit-Learning/HEAD/特殊的文件写入技巧.md -------------------------------------------------------------------------------- /通用代码审计思路.md: -------------------------------------------------------------------------------- https://raw.githubusercontent.com/jiangsir404/Audit-Learning/HEAD/通用代码审计思路.md --------------------------------------------------------------------------------