当前位置:网站首页>[geek challenge 2019] havefun1
[geek challenge 2019] havefun1
2022-04-23 09:20:00 【Partition CC】
Title: target link
http://60076ab2-e535-445f-ac1b-6ea24e101699.node4.buuoj.cn:81
First click on the target I went in and found a cat ( Shaking his tail, he found that he could still move , Visually, it looks like a clever dog, wagging its tail , Well, it doesn't matter )
Next click F12 Open developer mode and find a string of PHP Code , The code means : With GET By cat, Direct output cat value , If cat Value =dog The output 'Syc{cat_cat_cat_cat}'.
<!--
$cat=$_GET['cat'];
echo $cat;
if($cat=='dog'){
echo 'Syc{cat_cat_cat_cat}';
}
-->

When the meaning of the code is understood clearly, it is convenient to do the problem , Try typing ?cat=dog flag It's coming out.
end
版权声明
本文为[Partition CC]所创,转载请带上原文链接,感谢
https://yzsam.com/2022/04/202204230630141907.html
边栏推荐
- Notes on xctf questions
- Wechat applet catchtap = "todetail" event problem
- OpenCV中的图像处理 —— 轮廓入门+轮廓特征
- Valgrind et kcachegrind utilisent l'analyse d'exécution
- 小程序报错:Cannot read property 'currentTarget' of undefined
- SAP 101K 411k inventory change
- Open services in the bottom bar of idea
- 501. 二叉搜索树中的众数
- Colorui solves the problem of blocking content in bottom navigation
- 调包求得每个样本的k个邻居
猜你喜欢

Installation of data cleaning ETL tool kettle

Kettle实验 (三)

I don't understand time, timestamp and time zone. Look at this article

《信息系统项目管理师总结》第八章 项目干系人管理

Applet error: should have URL attribute when using navigateto, redirectto or switchtab

Program, process, thread; Memory structure diagram; Thread creation and startup; Common methods of thread

kettle实验

node安装

Download and install bashdb

AQS & reentrantlock implementation principle
随机推荐
小程序报错 :should have url attribute when using navigateTo, redirectTo or switchTab
EmuElec 编译总结
資源打包關系依賴樹
501. Mode in binary search tree
员工试用期转正申请书(泸州老窖)
web页面如何渲染
NPM installation yarn
Common errors of VMware building es8
A must see wechat applet development guide 1 - basic knowledge
Employee probation application (Luzhou Laojiao)
112. 路径总和
Group Backpack
Kettle experiment (III)
Download and install bashdb
Harbor enterprise image management system
Give the method of instantiating the object to the new object
#yyds干货盘点#ubuntu18.0.4安装mysql并解决ERROR 1698: Access denied for user ''root''@''localhost''
DMP engine work summary (2021, lightsaber)
Initial experience of talent plan learning camp: communication + adhering to the only way to learn open source collaborative courses
Go language self-study series | golang nested structure