当前位置:网站首页>[wp][introduction] brush weak type questions
[wp][introduction] brush weak type questions
2022-07-05 03:47:00 【_ Xiao SA】
<?php
include "flag.php";
highlight_file(__FILE__);
error_reporting(0);
$a = $_GET['param1'];
$b = $_POST['param2'];
$c = $_GET['param3'];
$d = $_POST['param4'];
if($a!==$b && md5($a)===md5($b) && $c!==$d && sha1($c)===sha1($d)){
echo $flag2;
die(" xiu_er_!!");
}else{
echo "fail";
}
?>

2.
<?php
include "flag.php";
highlight_file(__FILE__);
error_reporting(0);
if(isset($_GET['param1'])){
$a = $_GET['param1'];
switch ($a) {
case $a>=0:
echo 0;
break;
case $a>=10:
echo $flag3;
break;
default:
echo 2;
break;
}
}
?>
?param1=0
<?php
include "flag.php";
highlight_file(__FILE__);
error_reporting(0);
if(isset($_GET['param1'])){
$a = $_GET['param1'];
switch ($a) {
case $a>=0:
echo 0;
break;
case $a>=10:
echo $flag3;
break;
default:
echo 2;
break;
}
}
?>
?param1=0
<?php
include "flag.php";
highlight_file(__FILE__);
error_reporting(0);
$msg = json_decode($_GET['param1']);
if($msg->key == $key){
echo $flag5;
die(" xiu_er_!!");
}else{
echo "fail";
}
?>
?param1={“key”:0}
<?php
include "flag.php";
highlight_file(__FILE__);
error_reporting(0);
$s = $_GET['a'];
if(!is_numeric($s)){
if($s+1 === 1000){
die($flag7);
}
}
?>
?a=999a
<?php
include "flag.php";
highlight_file(__FILE__);
error_reporting(0);
$param2 = 'param2';
extract($_GET);
if (isset($param1)) {
if ($param1 == $content){
foreach($arr as $key => $value){
$$key = $value;
}
if($param2==='getflag'){
echo $flag9;
}
}else{
echo "Oh..nooo";
}
}
?>
?param1=1¶m2=getflag&content=1
<?php
include "flag.php";
highlight_file(__FILE__);
error_reporting(0);
if(isset($_GET['password'])){
if(ereg("^[a-zA-Z0-9]+$", $_GET['password'])===false){
echo "must be alphanumeric";
}elseif (strpos($_GET['password'], '--')!=false) {
die($flag8);
}else{
echo "Invalid password";
}
}
?>
?password=a%00–
<?php
include "flag.php";
highlight_file(__FILE__);
error_reporting(0);
$flag = 'test';
extract($_GET);
if($a!=$b && md5($a)==md5($b) && $c!==$d && sha1($c)===sha1($d)){
if(gettype($a)=='array' && gettype($b)=='array'){
die('Oh..no..');
}
if($$flag==='getflag'){
die($flag11);
}
}
?>
?a=QNKCDZO&b=s878926199a&c[]=3&d[]=4&flag=test&test=getflag
<?php
include "flag.php";
highlight_file(__FILE__);
error_reporting(0);
$paa = 'come_baby';
var_dump($_GET['param']);
parse_str($_GET['param']);
if($arr[1]==="i want" && $paa!=='come_baby' && $a_b==='haha'){
die($flag10);
}else{
echo "Oh..no..";
}
?>
?param=arr[1]=i want%26paa=1%26a_b=haha
边栏推荐
- ICSI213/IECE213 Data Structures
- Mongodb common commands
- 【无标题】
- Web components series (VII) -- life cycle of custom components
- Talk about the SQL server version of DTM sub transaction barrier function
- [vérification sur le Web - divulgation du code source] obtenir la méthode du code source et utiliser des outils
- VM in-depth learning (XXV) -class file overview
- It took two nights to get Wu Enda's machine learning course certificate from Stanford University
- An elegant program for Euclid‘s algorithm
- The perfect car for successful people: BMW X7! Superior performance, excellent comfort and safety
猜你喜欢

Subversive cognition: what does SRE do?

Share the newly released web application development framework based on blazor Technology

C file in keil cannot be compiled

Thread Basics

一文带你了解BI的前世今身与企业数字化转型的关系

Blue Bridge Cup single chip microcomputer -- PWM pulse width modulation
![[learning notes] month end operation -gr/ir reorganization](/img/4e/9585b7c62527beaa30a74060cb0e94.jpg)
[learning notes] month end operation -gr/ir reorganization
![[software reverse - basic knowledge] analysis method, assembly instruction architecture](/img/97/8001db1c572495a115d32d9dd7360e.png)
[software reverse - basic knowledge] analysis method, assembly instruction architecture

Redis6-01nosql database

The perfect car for successful people: BMW X7! Superior performance, excellent comfort and safety
随机推荐
Assembly - getting started
DMX parameter exploration of grandma2 onpc 3.1.2.5
[system security] ten thousand words summary system virtualization container bottom layer principle experiment
[learning notes] month end operation -gr/ir reorganization
VM in-depth learning (XXV) -class file overview
UI自动化测试从此告别手动下载浏览器驱动
How rem is used
English essential vocabulary 3400
花了2晚,拿到了吴恩达@斯坦福大学的机器学习课程证书
About MySQL database connection exceptions
[vérification sur le Web - divulgation du code source] obtenir la méthode du code source et utiliser des outils
Unity implements the code of the attacked white flash (including shader)
ABP vNext microservice architecture detailed tutorial - distributed permission framework (Part 2)
[web Audit - source code disclosure] obtain source code methods and use tools
The perfect car for successful people: BMW X7! Superior performance, excellent comfort and safety
DECLARE_ WAIT_ QUEUE_ HEAD、wake_ up_ Interruptible macro analysis
[groovy] loop control (number injection function implements loop | times function | upto function | downto function | step function | closure can be written outside as the final parameter)
Zero foundation uses paddlepaddle to build lenet-5 network
speed or tempo in classical music
[groovy] string (string type variable definition | character type variable definition)