[津门杯]全部WEB题解

津门杯WEB题解

日常比赛被爆，感谢队里教我题的大师傅

power_cut

存在一个.index.php.swp文件，vim -r 恢复一下

<?php
class logger{
   
    public $logFile;
    public $initMsg;
    public $exitMsg;
    function __construct($file){
   
        // initialise variables
        $this->initMsg="#--session started--#\n";
        $this->exitMsg="#--session end--#\n";
        $this->logFile =  $file;
        readfile($this->logFile);

    }
    function log($msg){
   
        $fd=fopen($this->logFile,"a+");
        fwrite($fd,$msg."\n");
        fclose($fd);
    }
    function __destruct(){
   
        echo "this is destruct";
    }
}
class weblog {
   
    public $weblogfile;
    function __construct() {
   
        $flag="system('cat /flag')";
        echo "$flag";
    }
    function __wakeup(){
   
        // self::waf($this->filepath);
        $obj = new logger($this->weblogfile);
    }
    public function waf($str){
   
        $str=preg_replace("/[<>*#'|?\n ]/","",$str);
        $str=str_replace('flag','',$str);
        return $str;
    }
    function __destruct(){
   
        echo "this is destruct";
    }
}
$log = $_GET