当前位置:网站首页>[wp][introduction] brush weak type questions
[wp][introduction] brush weak type questions
2022-07-05 03:47:00 【_ Xiao SA】
<?php
include "flag.php";
highlight_file(__FILE__);
error_reporting(0);
$a = $_GET['param1'];
$b = $_POST['param2'];
$c = $_GET['param3'];
$d = $_POST['param4'];
if($a!==$b && md5($a)===md5($b) && $c!==$d && sha1($c)===sha1($d)){
echo $flag2;
die(" xiu_er_!!");
}else{
echo "fail";
}
?>
2.
<?php
include "flag.php";
highlight_file(__FILE__);
error_reporting(0);
if(isset($_GET['param1'])){
$a = $_GET['param1'];
switch ($a) {
case $a>=0:
echo 0;
break;
case $a>=10:
echo $flag3;
break;
default:
echo 2;
break;
}
}
?>
?param1=0
<?php
include "flag.php";
highlight_file(__FILE__);
error_reporting(0);
if(isset($_GET['param1'])){
$a = $_GET['param1'];
switch ($a) {
case $a>=0:
echo 0;
break;
case $a>=10:
echo $flag3;
break;
default:
echo 2;
break;
}
}
?>
?param1=0
<?php
include "flag.php";
highlight_file(__FILE__);
error_reporting(0);
$msg = json_decode($_GET['param1']);
if($msg->key == $key){
echo $flag5;
die(" xiu_er_!!");
}else{
echo "fail";
}
?>
?param1={“key”:0}
<?php
include "flag.php";
highlight_file(__FILE__);
error_reporting(0);
$s = $_GET['a'];
if(!is_numeric($s)){
if($s+1 === 1000){
die($flag7);
}
}
?>
?a=999a
<?php
include "flag.php";
highlight_file(__FILE__);
error_reporting(0);
$param2 = 'param2';
extract($_GET);
if (isset($param1)) {
if ($param1 == $content){
foreach($arr as $key => $value){
$$key = $value;
}
if($param2==='getflag'){
echo $flag9;
}
}else{
echo "Oh..nooo";
}
}
?>
?param1=1¶m2=getflag&content=1
<?php
include "flag.php";
highlight_file(__FILE__);
error_reporting(0);
if(isset($_GET['password'])){
if(ereg("^[a-zA-Z0-9]+$", $_GET['password'])===false){
echo "must be alphanumeric";
}elseif (strpos($_GET['password'], '--')!=false) {
die($flag8);
}else{
echo "Invalid password";
}
}
?>
?password=a%00–
<?php
include "flag.php";
highlight_file(__FILE__);
error_reporting(0);
$flag = 'test';
extract($_GET);
if($a!=$b && md5($a)==md5($b) && $c!==$d && sha1($c)===sha1($d)){
if(gettype($a)=='array' && gettype($b)=='array'){
die('Oh..no..');
}
if($$flag==='getflag'){
die($flag11);
}
}
?>
?a=QNKCDZO&b=s878926199a&c[]=3&d[]=4&flag=test&test=getflag
<?php
include "flag.php";
highlight_file(__FILE__);
error_reporting(0);
$paa = 'come_baby';
var_dump($_GET['param']);
parse_str($_GET['param']);
if($arr[1]==="i want" && $paa!=='come_baby' && $a_b==='haha'){
die($flag10);
}else{
echo "Oh..no..";
}
?>
?param=arr[1]=i want%26paa=1%26a_b=haha
边栏推荐
- Share the newly released web application development framework based on blazor Technology
- [groovy] string (string injection function | asBoolean | execute | minus)
- 【web审计-源码泄露】获取源码方法,利用工具
- MySQL winter vacation self-study 2022 11 (10)
- 汇编-入门
- Accuracy problem and solution of BigDecimal
- [web Audit - source code disclosure] obtain source code methods and use tools
- Difference between MotionEvent. getRawX and MotionEvent. getX
- 特殊版:SpreadJS v15.1 VS SpreadJS v15.0
- Google Chrome CSS will not update unless the cache is cleared - Google Chrome CSS doesn't update unless clear cache
猜你喜欢
Subversive cognition: what does SRE do?
函数基础学习02
Yuancosmic ecological panorama [2022 latest]
【web审计-源码泄露】获取源码方法,利用工具
Basic function learning 02
【软件逆向-分析工具】反汇编和反编译工具
@Transactional 注解导致跨库查询失效的问题
The perfect car for successful people: BMW X7! Superior performance, excellent comfort and safety
Huawei MPLS experiment
Some enterprise interview questions of unity interview
随机推荐
Necessary fonts for designers
Excuse me, my request is a condition update, but it is blocked in the buffer. In this case, can I only flush the cache every time?
[software reverse analysis tool] disassembly and decompilation tool
[learning notes] month end operation -gr/ir reorganization
函数基础学习02
An elegant program for Euclid‘s algorithm
Basic authorization command for Curl
English essential vocabulary 3400
Flex flexible layout
MindFusion.Virtual Keyboard for WPF
有個疑問 flink sql cdc 的話可以設置並行度麼, 並行度大於1會有順序問題吧?
Kubernetes -- cluster expansion principle
Anti debugging (basic principles of debugger Design & NT NP and other anti debugging principles)
Installation of postman and postman interceptor
Clickhouse同步mysql(基于物化引擎)
What is the most effective way to convert int to string- What is the most efficient way to convert an int to a String?
Operation flow of UE4 DMX and grandma2 onpc 3.1.2.5
The perfect car for successful people: BMW X7! Superior performance, excellent comfort and safety
Yyds dry goods inventory embedded matrix
Zero foundation uses paddlepaddle to build lenet-5 network