当前位置:网站首页>I spring web upload
I spring web upload
2022-07-05 15:10:00 【Golden silk】
According to the prompt , Visit directly first flag.php file
Looking at the source code, I didn't find anything , So it can only be accessed through file upload flag.php file
Upload the file
Click on the uploaded file , Find out <? and php Filtered , You can't use it directly
hold php Switch to PHP Continue to upload , Find out PHP Not filtered out ,
So it can be used strtolower Function Dodge php The filter , Change species PHP How to write the code
There is the following code
Upload again , Open the uploaded file and find flag
Try another method , In one sentence
Upload files
Open the Chinese ant sword , Right mouse button , Add data , Copy file location URL, Input password abc
Click Add
Then go in and check, and you'll find flag La
边栏推荐
- go学习 ------jwt的相关知识
- 漫画:程序员不是修电脑的!
- Redis distributed lock principle and its implementation with PHP (2)
- MySQL----函数
- [detailed explanation of Huawei machine test] character statistics and rearrangement
- Bugku easy_ nbt
- 超越PaLM!北大碩士提出DiVeRSe,全面刷新NLP推理排行榜
- Can gbase 8A view the location of SQL statement history?
- Ecotone technology has passed ISO27001 and iso21434 safety management system certification
- 一键更改多个文件名字
猜你喜欢
Drive brushless DC motor based on Ti drv10970
Talking about how dataset and dataloader call when loading data__ getitem__ () function
超越PaLM!北大硕士提出DiVeRSe,全面刷新NLP推理排行榜
基于TI DRV10970驱动直流无刷电机
Ecotone technology has passed ISO27001 and iso21434 safety management system certification
Huawei Hubble incarnation hard technology IPO harvester
[JVM] operation instruction
Creation and optimization of MySQL index
Creation and use of thymeleaf template
面试突击62:group by 有哪些注意事项?
随机推荐
Jmeter性能测试:ServerAgent资源监控
30岁汇源,要换新主人了
CPU design practice - Chapter 4 practical task 2 using blocking technology to solve conflicts caused by related problems
Huawei Hubble incarnation hard technology IPO harvester
Magic methods and usage in PHP (PHP interview theory questions)
Fr exercise topic - simple question
裁员下的上海
做研究无人咨询、与学生不交心,UNC助理教授两年教职挣扎史
sql server学习笔记
亿咖通科技通过ISO27001与ISO21434安全管理体系认证
The difference between abstract classes and interfaces in PHP (PHP interview theory question)
[recruitment position] infrastructure software developer
[JVM] operation instruction
长列表优化虚拟滚动
Redis distributed lock principle and its implementation with PHP (2)
当代人的水焦虑:好水究竟在哪里?
NBA赛事直播超清画质背后:阿里云视频云「窄带高清2.0」技术深度解读
【数组和进阶指针经典笔试题12道】这些题,满足你对数组和指针的所有幻想,come on !
Coding devsecops helps financial enterprises run out of digital acceleration
729. 我的日程安排表 I :「模拟」&「线段树(动态开点)」&「分块 + 位运算(分桶)」