当前位置:网站首页>"Baidu Cup" CTF game 2017 February, Web: blast-1
"Baidu Cup" CTF game 2017 February, Web: blast-1
2022-07-03 07:03:00 【Part 02】
Topic content :
flag In a six bit variable .
include "flag.php";
$a = @$_REQUEST['hello'];
if(!preg_match('/^\w*$/',$a )){
die('ERROR');
}
eval("var_dump($$a);");
show_source(__FILE__);
?>
Only match pure letters , stay var_dump There are two $, Use GLOBALS dump Output all variables
hello=GLOBALS
边栏推荐
- Interface learning
- Laravel Web框架
- Software testing learning - the next day
- 利用C#实现Pdf转图片
- 2022-06-23 VGMP-OSPF-域間安全策略-NAT策略(更新中)
- C2338 Cannot format an argument. To make type T formattable provide a formatter<T> specialization:
- Crontab scheduled task
- 熊市里的大机构压力倍增,灰度、Tether、微策略等巨鲸会不会成为'巨雷'?
- centos php7.2.24升级到php7.3
- Unit test notes
猜你喜欢
4279. 笛卡尔树
The pressure of large institutions in the bear market has doubled. Will the giant whales such as gray scale, tether and micro strategy become 'giant thunder'?
Jmeter+influxdb+grafana of performance tools to create visual real-time monitoring of pressure measurement -- problem record
Machine learning | simple but feature standardization methods that can improve the effect of the model (comparison and analysis of robustscaler, minmaxscaler, standardscaler)
Setting up the development environment of dataworks custom function
Notes on the core knowledge of Domain Driven Design DDD
Pytest -- write and manage test cases
Basic components and intermediate components
Inno setup production and installation package
Use the jvisualvm tool ----- tocmat to start JMX monitoring
随机推荐
JUC forkjoinpool branch merge framework - work theft
10000小时定律不会让你成为编程大师,但至少是个好的起点
Distributed transactions
Mise en place d'un environnement de développement de fonctions personnalisées
[day15] introduce the features, advantages and disadvantages of promise, and how to implement it internally. Implement promise by hand
Hands on redis master-slave replication, sentinel master-slave switching, cluster sharding
萬卷書 - 價值投資者指南 [The Education of a Value Investor]
Inno setup production and installation package
2022 East China Normal University postgraduate entrance examination machine test questions - detailed solution
Interfaces and related concepts
JMeter test result output
【code】if (list != null && list.size() > 0)优化,集合判空实现方式
Centos切换安装mysql5.7和mysql8.0
Reading notes of "learn to ask questions"
Software testing assignment - day 3
Golang operation redis: write and read hash type data
Software testing learning - day 3
Winter vacation work of software engineering practice
4279. 笛卡尔树
Setting up the development environment of dataworks custom function