打开页面显示 there is nothing
查看header发现hint:ip,Large internal network
利用X-Forwarded-For伪造IP,尝试了几个常用的IP
X-Forwarded-For:10.0.0.1时返回./m4nage.php
将请求包中test.php修改为./m4nage.php,依旧伪造IP得到:
右键修改请求方式为POST
key=1 得到:md5(key)==="1b4167610ba3f2ac426a68488dbd89be",and the key is ichunqiu***,the * is in [a-z0-9]<