misc-log analysis of CTF

1. Injection audit

The questioner usually uses sqlmap to run an injection point, and saves the log after running the data, so that the contestant can judge what data is injected by sqlmap. This data is usually a flag.

2, command execution audit

The questioner usually uses the one-word Trojan horse to perform a series of sensitive operations, or pretends not to know the password of the one-word Trojan horse at first, so as to carry out a series of blasting behaviors, so that the contestants can judge the password of the one-word Trojan horse.