Question

It’s time to find your first RCE by using the tips and tricks you’ve learned in this chapter.

是时候利用本章学习的技巧和诀窍找到你的第一个 RCE 了。

1. Identify suspicious user-input locations. For code injections, take note of every user-input location, including URL parameters, HTTP headers, body parameters, and file uploads. To find potential file inclusion vulnerabilities, check for input locations being used to determine or construct filenames and for file-upload functions.
2. Submit test payloads to the input locations in order to detect potential vulnerabilities.
3. If your requests are blocked, try protection-bypass techniques and see if your payload succeeds.
4. Finally, confirm the vulnerability by trying to execute harmless commands such as whoami , ls , and sleep 5 .
5. Avoid reading sensitive system files or altering any files with the vulnerability you’ve found.
6. Submit your first RCE report to the program!