当前位置:网站首页>CTFshow,信息搜集:web14
CTFshow,信息搜集:web14
2022-07-07 12:49:00 【Part 02】
有时候源码里面就能不经意间泄露重要(editor)的信息,默认配置害死人

在编辑器中有很多个地方有 xx 空间,在里面可以看到很多目录
/var/www/html/nothinghere
在这个目录下有 /fl000g.txt 文件

/nothinghere/fl000g.txt
访问得到 flag
边栏推荐
- Shengteng experience officer Episode 5 notes I
- What is cloud primordial? This time, I can finally understand!
- Because the employee set the password to "123456", amd stolen 450gb data?
- Summary on adding content of background dynamic template builder usage
- 拜拜了,大厂!今天我就要去厂里
- 缓冲区溢出保护
- Cocoscreator resource encryption and decryption
- Es log error appreciation -maximum shards open
- Navigation — 这么好用的导航框架你确定不来看看?
- 【服务器数据恢复】某品牌StorageWorks服务器raid数据恢复案例
猜你喜欢

CPU与chiplet技术杂谈

JSON parsing instance (QT including source code)

Pinduoduo lost the lawsuit, and the case of bargain price difference of 0.9% was sentenced; Wechat internal test, the same mobile phone number can register two account functions; 2022 fields Awards an

In the field of software engineering, we have been doing scientific research for ten years!

13 ux/ui/ue best creative inspiration websites in 2022

Substance Painter笔记:多显示器且多分辨率显示器时的设置

用于增强压缩视频质量的可变形卷积密集网络

Pandora IOT development board learning (HAL Library) - Experiment 12 RTC real-time clock experiment (learning notes)

Five pain points for big companies to open source

Jetson AGX Orin CANFD 使用
随机推荐
leetcode:648. 单词替换【字典树板子 + 寻找若干前缀中的最短符合前缀】
云上“视界” 创新无限 | 2022阿里云直播峰会正式上线
Substance Painter笔记:多显示器且多分辨率显示器时的设置
回归测试的分类
How bad can a programmer be? Nima, they are all talents
Cocoscreator resource encryption and decryption
Pandora IOT development board learning (HAL Library) - Experiment 12 RTC real-time clock experiment (learning notes)
JS image to Base64
Jetson AGX Orin CANFD 使用
Navigation - are you sure you want to take a look at such an easy-to-use navigation framework?
[Yugong series] go teaching course 005 variables in July 2022
一个程序员的水平能差到什么程度?尼玛,都是人才呀...
PG basics -- Logical Structure Management (locking mechanism -- table lock)
Internal sort - insert sort
Data connection mode in low code platform (Part 2)
Discussion on CPU and chiplet Technology
C 6.0 language specification approved
JS in the browser Base64, URL, blob mutual conversion
Introduction and use of Kitti dataset
Novel Slot Detection: A Benchmark for Discovering Unknown Slot Types in the Dialogue System