PHP command execution
PHP command execution
Main function
Code execution function
${}
php complex variable
<?php ${phpinfo()};
{KaTeX parse error: Expected 'EOF', got '}' at position 12: {getname()}} ̲ => {s1ye} =>echo "s1ye";, It can be found that the getname function is executed first and "s1ye" is output, and then echo (priori ...
Posted by cptn_future on Sat, 02 Oct 2021 11:46:50 -0700
2021 Chang'an Cup - College Group - crypto easyrsa WP
The game was terrible. After all, it was too bad for me. No password was given. esayrsa was not easy at all. This problem was given an hour and a half after the game.
1, Title
from Crypto.Util.number import *
def add(a,b):
if(a<b):
a0 = str(b).encode()
b0 = str(a).encode()
else:
a0 = str(a).encode()
...
Posted by mverrier on Tue, 28 Sep 2021 13:17:07 -0700
CTFshow question brushing Diary - WEB-SSTI(web361-372)
ssti, mostly python ssti
Preview link
Link 1 Link 2
Basic knowledge
Code block
Variable block {{}} Used to print expressions to template output
Annotation block {##} notes
Control block {%%} You can declare variables or execute statements
Line declaration ## Can have the same effect as {%%}
common method
__class__ View t ...
Posted by Stingus on Sun, 26 Sep 2021 02:13:56 -0700
streamgame1 of attack and defense world crypto master problem
streamgame1 of attack and defense world crypto master problem
Continue to start the reverse journey of the whole stack of dreams~ This problem is streamgame1 of the world's crypto master problem . . Download attachments, which are typical LFSR types:
from flag import flag
assert flag.startswith("flag{")
# Function: judge whether the string s ...
Posted by phpcoding2 on Tue, 21 Sep 2021 04:10:01 -0700
CTFshow question brushing diary MISC pictures (Part 2, 24-51) file structure and color channel
Document structure
Misc24 BMP height change
Tip: the flag is above the picture
bmp format file
The real flag is on the picture. You can see it by changing the height
Misc25 PNG height change
Tip: the flag is under the picture
Just change the height
misc26-crc32
Tip: the flag is still under the picture, but how much is it?
Open t ...
Posted by kaspari22 on Sat, 11 Sep 2021 23:02:31 -0700