当前位置:网站首页>Attack and defense world web practice area (backup, cookie, disabled_button)
Attack and defense world web practice area (backup, cookie, disabled_button)
2022-07-24 02:38:00 【Unknown white hat】
Catalog
Follow the prompts http Respond to
F12 Often look at the source code of web pages
Modify the web page source code
backup
Topic introduction

Topic ideas
Visit the shooting range

Common backup file suffixes
“.bak”
“.git”
“.svn”
“.swp”
“.~”
“.bash_history”
“.bkf”
visit index.php.bak
Will download index.php.bak file

find flag
Cyberpeace{855A1C4B3401294CB6604CCC98BDE334}
cookie
Topic introduction

Topic ideas
Visit the shooting range

F12 View network search cookie

visit cookie.php page
Follow the prompts http Respond to

find flag
cyberpeace{9485fb1968e7c4cc0f170ac0feb51804}
disabled_button
Topic introduction

Topic ideas
Visit the shooting range

F12 Often look at the source code of web pages

Modify the web page source code
Delete disabled

Find out flag Button can be clicked
Click on flag Button

Find out flag
cyberpeace{1fd982589c3c5568ef56a354ba18bdda}
边栏推荐
- QT display Chinese garbled code
- Pbootcms template calls the tag ordinal number from 2 or automatic number
- Mysql database, query
- 【补题日记】[2022杭电暑期多校1]C-Backpack
- Why use the well architected framework?
- Camper recruitment | AI youth with the world in mind, the United Nations needs your help for sustainable development!
- Réalisation d'un diagramme de zone de ligne brisée - Diagramme Rose - Diagramme à barres
- 中城院真的在帮助供应商解决问题吗?
- rust allow dead_ code
- Essential skills for programmers -- breakpoint debugging (idea version)
猜你喜欢
![[diary of supplementary questions] [2022 Niuke summer school 1] c-grab the seat](/img/86/1cf3bbc53d9365bb95dae6d532e276.png)
[diary of supplementary questions] [2022 Niuke summer school 1] c-grab the seat

【知识图谱】实践篇——基于医疗知识图谱的问答系统实践(Part2):图谱数据准备与导入

Sharing a case of controller restart caused by a CIFS bug in NetApp Fas series

Pbootcms template calls the tag ordinal number from 2 or automatic number

Leetcode 70 climbing stairs, 199 right view of binary tree, 232 realizing queue with stack, 143 rearranging linked list

BPG notes (III)

Recorded on July 21, 2022
![js傳參時傳入 string有數據;傳入 number時沒有數據;2[0]是對的!number類型數據可以取下標](/img/4e/3d0c25d9579b6d5c00473048dbbd83.png)
js傳參時傳入 string有數據;傳入 number時沒有數據;2[0]是對的!number類型數據可以取下標
![[diary of supplementary questions] [2022 Niuke summer school 1] i-chiitoitsu](/img/be/47b8a86399f760e7cd6181528884c6.png)
[diary of supplementary questions] [2022 Niuke summer school 1] i-chiitoitsu

SSM的技术论坛含前后台
随机推荐
让生活充满幸福感
Make life full of happiness
js傳參時傳入 string有數據;傳入 number時沒有數據;2[0]是對的!number類型數據可以取下標
SSM的技术论坛含前后台
Hydrogen entrepreneurship competition | Liu Xiaoqi, chairman of Guohua Investment: take advantage of the integration of scenery, hydrogen storage and finance to host the entrepreneurship competition a
Essential skills for programmers -- breakpoint debugging (idea version)
Do securities companies really have principal guaranteed financial products?
Mysql数据库,查询篇
[diary of supplementary questions] [2022 Niuke summer school 1] c-grab the seat
记于2022.7.21
Pyg uses messagepassing to build GCN to realize node classification
营员招募|心怀世界的AI青年们,联合国需要你为可持续发展助力!
微信小程序实现折线面积图-玫瑰图-立体柱状图
NumberOptional:一个字符串转数字的工具
Live800: there is nothing trivial about customer service. Don't let service destroy the reputation of the enterprise
微信小程序實現折線面積圖-玫瑰圖-立體柱狀圖
C language actual combat guessing game
【补题日记】[2022杭电暑期多校1]C-Backpack
POP3客户端代码的实现
The practical influence of educational robot on students' learning effect