Attack and defense world web practice area (webshell, command_execution, simple_js)

Catalog

 webshell

Topic introduction

Topic ideas

Visit the shooting range

Use the ant sword link directly according to the prompt

find flag

command_execution

Topic introduction

Topic ideas

Visit the shooting range

Joint query according to the prompt

Check the contents of the home directory

Read the flag.txt file

find flag

simple_js

Topic introduction

Topic ideas

Visit the shooting range

Ctrl+u View the source code

Copy the code and create a new html

Sign in

---

 webshell

Topic introduction

Topic ideas

Visit the shooting range

Use the ant sword link directly according to the prompt

find flag

cyberpeace{971ea52802d9fdb9eb06e92e929b6c01}

command_execution

Topic introduction

Topic ideas

Visit the shooting range

Joint query according to the prompt

Check the contents of the home directory

Read the flag.txt file

find flag

cyberpeace{bcf2a6e8ed810236326577da10c87707}

simple_js

Topic introduction

Topic ideas

Visit the shooting range

Ctrl+u View the source code

The function of the code is very simple , Is to press a string of numbers separated by commas ascii Convert to string , Then the output

We need to modify the code , take for In circulation p += String.fromCharCode((o = tab2[i]));

Change to p += String.fromCharCode((o = tab[i]));

Copy the code and create a new html

Found at the tail

\x35\x35\x2c\x35\x36\x2c\x35\x34\x2c\x37\x39\x2c\x31\x31\x35\x2c\x36\x39\x2c\x31\x31\x34\x2c\x31\x31\x36\x2c\x31\x30\x37\x2c\x34\x39\x2c\x35\x30

On the 16 Binary decoding

https://www.qqxiuzi.cn/bianma/base.php?type=16

obtain 55,56,54,79,115,69,114,116,107,49,50

Sign in

obtain flag

Cyberpeace{786OsEASSWORD}