文件包含流量特征

漏洞信息

主要是通过后端对于请求过滤不完全产生，本质是越权访问漏洞

大量…/或者绕过后端过滤的包，后面跟的是敏感文件

/etc/passwd
/etc/shadow
/etc/my.conf
/etc/redhat-release
/etc/.bash_history
/etc/httpd/conf/httpd.conf

/proc/mounts
/proc/sched_debug
/proc/net/fib_trie
/proc/self/environ
/proc/self/loginuid

/root/.bash_history
/root/.mysql_history

/var/lib/mlocate/mlocate.db