当前位置:网站首页>The "Baidu Cup" CTF competition was held in February 2017, Web: explosion-2
The "Baidu Cup" CTF competition was held in February 2017, Web: explosion-2
2022-07-05 13:19:00 【Part 02】
Topic content :
flag Not in variable .
<?php
include "flag.php";
$a = @$_REQUEST['hello'];
eval( "var_dump($a);");
show_source(__FILE__);
?hello=file('flag.php')
file Commands can be read directly
file_get_contents It's OK , But in the source code
边栏推荐
- jenkins安装
- "Baidu Cup" CTF competition in September, web:sql
- 无密码身份验证如何保障用户隐私安全?
- Write API documents first or code first?
- “百度杯”CTF比赛 九月场,Web:Upload
- Backup and restore of Android local SQLite database
- MySQL --- 数据库查询 - 排序查询、分页查询
- RHCSA8
- MySQL splits strings for conditional queries
- DataPipeline双料入选中国信通院2022数智化图谱、数据库发展报告
猜你喜欢
简单上手的页面请求和解析案例
go 数组与切片
碎片化知识管理工具Memos
A detailed explanation of ASCII code, Unicode and UTF-8
【每日一题】1200. 最小绝对差
RHCSA10
How to protect user privacy without password authentication?
Flutter 3.0更新后如何应用到小程序开发中
Developers, is cloud native database the future?
MySQL giant pit: update updates should be judged with caution by affecting the number of rows!!!
随机推荐
go 字符串操作
Shu tianmeng map × Weiyan technology - Dream map database circle of friends + 1
Developers, is cloud native database the future?
Reverse Polish notation
Get to know linkerd project for the first time
ASEMI整流桥HD06参数,HD06图片,HD06应用
Can and can FD
#yyds干货盘点# 解决名企真题:搬圆桌
Overflow toolbar control in SAP ui5 view
国际自动机工程师学会(SAE International)战略投资几何伙伴
Talking about fake demand from takeout order
JPA规范总结和整理
How to choose note taking software? Comparison and evaluation of notion, flowus and WOLAI
JS to determine whether an element exists in the array (four methods)
[daily question] 1200 Minimum absolute difference
Android本地Sqlite数据库的备份和还原
Rocky基础命令3
Run, open circuit
Default parameters of function & multiple methods of function parameters
C# 对象存储