[网鼎杯 2020 朱雀组]phpweb

最新推荐文章于 2024-09-04 10:39:00 发布

原创

最新推荐文章于 2024-09-04 10:39:00 发布 · 2.1k 阅读

1 ·

CC 4.0 BY-SA版权

文章标签：

#php #安全

[网鼎杯 2020 朱雀组]phpweb

在这里插入图片描述打开题目，一看就不简单，好嘛，还看不完全，一直刷新，抓个包。
根据后面的提示好像前面是函数后面是参数，意思是用了call_user_func()函数。嗯。。。用file_get_contents(index.php)看一下源码

`    <?php
    $disable_fun = array("exec","shell_exec","system","passthru","proc_open","show_source","phpinfo","popen","dl","eval","proc_terminate","touch","escapeshellcmd","escapeshellarg","assert","substr_replace","call_user_func_array","call_user_func","array_filter"