当前位置：网站首页>Buuctf [actf2020 freshman competition] include1

Buuctf [actf2020 freshman competition] include1

2022-04-23 09:19:00 【Partition CC】

Open the target and find that

F12 Check source code discovery ：url This file may contain a vulnerability     ?file=flag.php

Click on tips The page jumps to Can you find out the flag?

  Judgment can save php Fake protocol

structure payload The format is as follows

?file=php://../../resource=flag.php

（php://filter" Fake protocol " To include , When combined with an include function ,php://filter Flow will be treated as php File execution . So we usually code it , Prevent it from executing , This results in arbitrary file reads .）

（ If you use php://filter Pseudo protocol for File Inclusion , Need to add read=convert.base64-encode To encode the contents of the file ）

This topic php The pseudo protocol code is as follows

?file=php://filter/read=convert.base64-encode/resource=flag.php

enter

  Get a bunch of Base64 code  

utilize Base64 Code conversion tool to convert to flag

​​​​​​Base64 Code conversion tool ,Base64 Encryption and decryption

Big brother, take out your little hand to get rich zan A!

版权声明
本文为[Partition CC]所创，转载请带上原文链接，感谢
https://yzsam.com/2022/04/202204230630141948.html

边栏推荐

猜你喜欢

随机推荐