错误的安全配置

参考资源：

Top 10 2013-A5-Security Misconfiguration

https://www.owasp.org/index.php/Top_10_2013-A5-Security_Misconfiguration

安全配置检查列表

http://rdc.hundsun.com/portal/book/OWASP-SM/3295.html

不能不说的秘密-Google Hacking

http://rdc.hundsun.com/portal/book/OWASP-SM/3289.html

https://www.google.com/search?q=intitle%3Aindex.of+server.at&oq=intitle%3Aindex.of+server.at&aqs=chrome..69i57j69i58.1088j0j7&sourceid=chrome&ie=UTF-8

https://www.google.com/search?q=intext:%40qq.com+intext:password&ei=6jxoWq3LK8b98gXj-JiACQ&start=90&sa=N&biw=1540&bih=735

文件上传漏洞（绕过姿势）

https://thief.one/2016/09/22/%E4%B8%8A%E4%BC%A0%E6%9C%A8%E9%A9%AC%E5%A7%BF%E5%8A%BF%E6%B1%87%E6%80%BB-%E6%AC%A2%E8%BF%8E%E8%A1%A5%E5%85%85/

闲话文件上传漏洞

http://www.freebuf.com/vuls/128846.html

文件上传漏洞总结

http://jdrops.dropsec.xyz/2017/07/17/%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0%E6%BC%8F%E6%B4%9E%E6%80%BB%E7%BB%93/