只做了WEB和MISC,下面是wp
WEB
XSS1
http://103.50.253.209/xss1/
F12一下看到这题是在input标签里XSS,所以先用”>闭合value就行了,我写的是
"><script>alert(document.domain)</script>
灵梦的钱罐
http://118.114.208.107:30048/hakurei-reimu/
题目里说十万元可以干任何事,于是post
money=100000
拿到flag:cnss{G00d_1uck_Hav3_Fun}
Nothing Here
http://118.114.208.107:30048/nothing-here/index.php
这题给的地址后面是index.php,打开后发现变成index.html,重发后在相应头里找到flag:cnss{G0_Go_GO}
我用