当前位置:网站首页>Buuctf-[[gwctf 2019] I have a database (xiaoyute detailed explanation)
Buuctf-[[gwctf 2019] I have a database (xiaoyute detailed explanation)
2022-07-06 06:00:00 【Xiaoyute detailed explanation】
buuctf-[[GWCTF 2019] I have a database ( Xiaoyute detailed explanation )
Here I don't know why the display is garbled
Use it directly dirsearch Scan the website
Here we are phpmyadmin Catalog , Login without password succeeded .
The version number is given here MySQL database Version 4.8.1.
This version contains a file vulnerability
The principle of vulnerability is
utilize / send db_datadict.php? Become a nonexistent Directory , utilize include The directory of functions keeps jumping, trying to get flag Catalog .
payload
phpmyadmin/index.php?target=db_datadict.php?/../../../../../flag
边栏推荐
- B站刘二大人-线性回归及梯度下降
- Redistemplate common collection instructions opsforvalue (II)
- ArcGIS application foundation 4 thematic map making
- Sqlmap tutorial (III) practical skills II
- Luogu [Beginner Level 4] array p1427 number game of small fish
- C language learning notes (mind map)
- [Baiwen smart home] first day of the course_ Learn Embedded and understand the development mode of bare metal and RTOS
- continue和break的区别与用法
- (5) Explanation of yolo-v3 core source code (3)
- Node 之 nvm 下载、安装、使用,以及node 、nrm 的相关使用
猜你喜欢
Classes and objects (I) detailed explanation of this pointer
Hongliao Technology: Liu qiangdong's "heavy hand"
MIT6.s081-2020 Lab2 System Calls
How to use the container reflection method encapsulated by thinkphp5.1 in business code
IP day 16 VLAN MPLS configuration
[web security] nodejs prototype chain pollution analysis
GTSAM中李群的运用
Garbage collector with serial, throughput priority and response time priority
Rustdesk builds its own remote desktop relay server
HCIA review
随机推荐
Usage of test macro of GTEST
Rustdesk builds its own remote desktop relay server
H3C S5820V2_5830V2交换机IRF2堆叠后升级方法
Clear floating mode
Raised a kitten
Grant Yu, build a web page you want from 0
局域网同一个网段通信过程
【无标题】
Accélération de la lecture vidéo de l'entreprise
Web服务连接器:Servlet
[happy Spring Festival] if you feel happy, dance
[email protected]树莓派
[untitled]
进程和线程
Station B, Master Liu Er - back propagation
Luogu [Beginner Level 4] array p1427 number game of small fish
Embedded interview questions (I: process and thread)
Investment strategy discussion and market scale prediction report of China's solid state high power amplifier industry from 2022 to 2028
Is it difficult for an information system project manager?
Memory and stack related concepts