\u6d3b\u52a8\u53d1\u8d77\u4eba@\u5c0f\u865a\u7af9 \u60f3\u5bf9\u4f60\u8bf4：<\/p>\n
\u8fd9\u662f\u4e00\u4e2a\u4ee5\u5199\u4f5c\u535a\u5ba2\u4e3a\u76ee\u7684\u7684\u521b\u4f5c\u6d3b\u52a8，\u65e8\u5728\u9f13\u52b1\u5927\u5b66\u751f\u535a\u4e3b\u4eec\u6316\u6398\u81ea\u5df1\u7684\u521b\u4f5c\u6f5c\u80fd，\u5c55\u73b0\u81ea\u5df1\u7684\u5199\u4f5c\u624d\u534e\u3002\u5982\u679c\u4f60\u662f\u4e00\u4f4d\u70ed\u7231\u5199\u4f5c\u7684\u3001\u60f3\u8981\u5c55\u73b0\u81ea\u5df1\u521b\u4f5c\u624d\u534e\u7684\u5c0f\u4f19\u4f34，\u90a3\u4e48，\u5feb\u6765\u53c2\u52a0\u5427！\u6211\u4eec\u4e00\u8d77\u53d1\u6398\u5199\u4f5c\u7684\u9b45\u529b，\u4e66\u5199\u51fa\u5c5e\u4e8e\u6211\u4eec\u7684\u6545\u4e8b\u3002\u6211\u4eec\u8bda\u631a\u9080\u8bf7\u4f60\u53c2\u52a0\u4e3a\u671f14\u5929\u7684\u521b\u4f5c\u6311\u6218\u8d5b！<\/p>\n
\u63d0\u9192：\u5728\u53d1\u5e03\u4f5c\u54c1\u524d，\u8bf7\u5c06\u4e0d\u9700\u8981\u7684\u5185\u5bb9\u5220\u9664\u3002<\/p>\n
\u00a0<\/p>\n
\u00a0<\/p>\n
\u00a0<\/p>\n
\n
\u00a0<\/p>\n
\u4e2d\u95f4\u4ef6\u7684\u6838\u5fc3\u4ef7\u503c\u5728\u4e8e\u5c4f\u853d\u5e95\u5c42\u590d\u6742\u6027，\u63d0\u4f9b\u6807\u51c6\u5316\u670d\u52a1（\u5982\u7f51\u7edc\u901a\u4fe1\u3001\u8d44\u6e90\u7ba1\u7406\u3001\u5b89\u5168\u8ba4\u8bc1），\u9009\u62e9\u65f6\u9700\u7ed3\u5408\u6280\u672f\u6808\u3001\u6027\u80fd\u9700\u6c42\u3001\u7cfb\u7edf\u89c4\u6a21（\u5355\u4f53\u5e94\u7528 \/ \u5206\u5e03\u5f0f）\u53ca\u751f\u6001\u517c\u5bb9\u6027（\u5982 Java \u9879\u76ee\u4f18\u5148\u9009 Tomcat，Python \u4f18\u5148\u9009 uWSGI）\u3002<\/p>\n
\n
IIS \u77ed\u6587\u4ef6\u540d\u6f0f\u6d1e（8.3 \u6587\u4ef6\u540d\u6f0f\u6d1e）\u6e90\u4e8e Windows \u7cfb\u7edf\u5bf9\u65e7\u7248 8.3 \u6587\u4ef6\u540d\u683c\u5f0f\u7684\u517c\u5bb9\u673a\u5236，\u5f53 IIS \u670d\u52a1\u5668\u542f\u7528\u77ed\u6587\u4ef6\u540d\u89e3\u6790\u65f6，\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u6784\u9020\u5e26\u6709~1\u540e\u7f00\u7684 URL \u5c1d\u8bd5\u83b7\u53d6\u6587\u4ef6 \/ \u76ee\u5f55\u7684\u77ed\u540d\u79f0，\u8fdb\u800c\u53ef\u80fd\u5bfc\u81f4\u8def\u5f84\u904d\u5386\u3001\u654f\u611f\u6587\u4ef6\u6cc4\u9732\u7b49\u98ce\u9669\u3002\u4ee5\u4e0b\u662f\u5177\u4f53\u7684\u68c0\u6d4b\u65b9\u6cd5：<\/p>\n
Windows \u7cfb\u7edf\u4f1a\u4e3a\u957f\u6587\u4ef6\u540d\u81ea\u52a8\u751f\u6210\u77ed\u6587\u4ef6\u540d（\u683c\u5f0f\u4e3a\u524d6\u4e2a\u5b57\u7b26~1.\u6269\u5c55\u540d，\u5982longfilename.txt\u751f\u6210longfi~1.txt）\u3002\u82e5 IIS \u672a\u7981\u7528\u77ed\u6587\u4ef6\u540d\u89e3\u6790，\u653b\u51fb\u8005\u53ef\u901a\u8fc7\u53d1\u9001\u5305\u542b~1\u7684 URL，\u63a2\u6d4b\u662f\u5426\u5b58\u5728\u5bf9\u5e94\u7684\u77ed\u6587\u4ef6\u540d，\u4ece\u800c\u63a8\u65ad\u670d\u52a1\u5668\u4e0a\u7684\u6587\u4ef6 \/ \u76ee\u5f55\u7ed3\u6784\u3002<\/p>\n
\u6784\u9020\u5305\u542b~1\u540e\u7f00\u7684 URL，\u89c2\u5bdf\u54cd\u5e94\u72b6\u6001\u7801\u6216\u5185\u5bb9：<\/p>\n
\u00a0<\/p>\n
import requests<\/p>\n
target = "http:\/\/example.com\/"
\nprefix = "test" # \u5047\u8bbe\u76ee\u5f55\/\u6587\u4ef6\u524d6\u4f4d\u4e3atest（\u4e0d\u8db36\u4f4d\u8865\u5168）
\nfor i in range(1, 10):
\n url = f"{target}{prefix}~{i}\/"
\n response = requests.get(url)
\n if response.status_code != 404:
\n print(f"\u77ed\u6587\u4ef6\u540d\u5b58\u5728: {url} \u72b6\u6001\u7801: {response.status_code}") <\/p>\n
\u00a0<\/p>\n
\u00a0<\/p>\n
\u901a\u8fc7\u4ee5\u4e0a\u65b9\u6cd5\u53ef\u6709\u6548\u68c0\u6d4b IIS \u77ed\u6587\u4ef6\u540d\u6f0f\u6d1e，\u4fee\u590d\u65f6\u9700\u4f18\u5148\u7981\u7528 8.3 \u6587\u4ef6\u540d\u751f\u6210，\u4ece\u6e90\u5934\u675c\u7edd\u98ce\u9669\u3002<\/p>\n
\n
\u5c1d\u8bd5\u8bbf\u95ee\u5e26 ~1 \u540e\u7f00\u7684 URL（\u5982 http:\/\/\u57df\u540d\/test~1\/），\u82e5\u8fd4\u56de 403 Forbidden \u6216 200 OK（\u975e 404），\u8bf4\u660e\u5b58\u5728 Windows \u7684 8.3 \u77ed\u6587\u4ef6\u540d\u673a\u5236（\u8be6\u89c1\u4e4b\u524d IIS \u6f0f\u6d1e\u68c0\u6d4b\u90e8\u5206）\u3002<\/p>\n
\u4f7f\u7528\u5de5\u5177（\u5982\u6d4f\u89c8\u5668 F12\u3001curl\u3001wget）\u83b7\u53d6\u54cd\u5e94\u5934，\u91cd\u70b9\u67e5\u770b Server \u5b57\u6bb5：<\/p>\n
\u00a0<\/p>\n
HTTP \u9519\u8bef 404.0 – Not Found
\n\u65e0\u6cd5\u627e\u5230\u8bf7\u6c42\u7684\u8d44\u6e90\u3002
\n\u7269\u7406\u8def\u5f84：C:\\\\inetpub\\\\wwwroot\\\\missing.aspx <\/p>\n
\u00a0<\/p>\n
Not Found
\nThe requested resource \/abc was not found on this server.
\nApache\/2.4.29 (Ubuntu) Server at example.com Port 80 <\/p>\n
\u00a0<\/p>\n
\u82e5\u80fd\u901a\u8fc7\u6f0f\u6d1e（\u5982\u547d\u4ee4\u6ce8\u5165）\u6267\u884c\u7cfb\u7edf\u547d\u4ee4：<\/p>\n
\u00a0<\/p>\n
\u4f7f\u7528 Nmap \u7684 HTTP \u6307\u7eb9\u811a\u672c：<\/p>\n
\u00a0<\/p>\n
bash<\/p>\n
nmap -sV –script http-system-detection \u76ee\u6807IP <\/p>\n
\u00a0<\/p>\n
\u8f93\u51fa\u4f1a\u663e\u793a\u64cd\u4f5c\u7cfb\u7edf\u731c\u6d4b（\u5982Running: Microsoft Windows Server 2016|2019 \u6216 Linux 3.10 – 5.4）\u3002<\/p>\n
\u5f00\u6e90\u6307\u7eb9\u8bc6\u522b\u5de5\u5177，\u652f\u6301\u7cbe\u51c6\u8bc6\u522b\u64cd\u4f5c\u7cfb\u7edf：<\/p>\n
\u00a0<\/p>\n
bash<\/p>\n
whatweb http:\/\/\u76ee\u6807\u57df\u540d <\/p>\n
\u00a0<\/p>\n
\u7ed3\u679c\u793a\u4f8b：<\/p>\n
\u00a0<\/p>\n
plaintext<\/p>\n
[http:\/\/example.com]
\nOS: Windows Server 2019
\nServer: Microsoft-IIS\/10.0 <\/p>\n
\n