PHP command execution

PHP command execution Main function Code execution function ${} php complex variable <?php ${phpinfo()}; {KaTeX parse error: Expected 'EOF', got '}' at position 12: {getname()}} ̲ => {s1ye} =>echo "s1ye";, It can be found that the getname function is executed first and "s1ye" is output, and then echo (priori ...

Posted by cptn_future on Sat, 02 Oct 2021 11:46:50 -0700

2021 Chang'an Cup - College Group - crypto easyrsa WP

The game was terrible. After all, it was too bad for me. No password was given. esayrsa was not easy at all. This problem was given an hour and a half after the game. 1, Title from Crypto.Util.number import * def add(a,b): if(a<b): a0 = str(b).encode() b0 = str(a).encode() else: a0 = str(a).encode() ...

Posted by mverrier on Tue, 28 Sep 2021 13:17:07 -0700

CTFshow question brushing Diary - WEB-SSTI(web361-372)

ssti, mostly python ssti Preview link Link 1 Link 2 Basic knowledge Code block Variable block {{}} Used to print expressions to template output Annotation block {##} notes Control block {%%} You can declare variables or execute statements Line declaration ## Can have the same effect as {%%} common method __class__ View t ...

Posted by Stingus on Sun, 26 Sep 2021 02:13:56 -0700

streamgame1 of attack and defense world crypto master problem

streamgame1 of attack and defense world crypto master problem Continue to start the reverse journey of the whole stack of dreams~ This problem is streamgame1 of the world's crypto master problem . . Download attachments, which are typical LFSR types: from flag import flag assert flag.startswith("flag{") # Function: judge whether the string s ...

Posted by phpcoding2 on Tue, 21 Sep 2021 04:10:01 -0700

CTFshow question brushing diary MISC pictures (Part 2, 24-51) file structure and color channel

Document structure Misc24 BMP height change Tip: the flag is above the picture bmp format file The real flag is on the picture. You can see it by changing the height Misc25 PNG height change Tip: the flag is under the picture Just change the height misc26-crc32 Tip: the flag is still under the picture, but how much is it? Open t ...

Posted by kaspari22 on Sat, 11 Sep 2021 23:02:31 -0700