[ASIS 2019]Unicorn shop1
启动靶机
一个购买商品界面。随便尝试了几个功能点,并没什么收获。右键查看源码
<!DOCTYPE html>
<html lang="zh-CN">
<head>
<meta charset="utf-8"><!--Ah,really important,seriously. -->
<meta http-equiv="X-UA-Compatible" content="IE=edge">
<meta name="viewport" content="width=device-width, initial-scale=1">
<title>Unicorn shop</title>
<!-- Don't be frustrated by the same view,we've changed the challenge content.-->
<!-- Bootstrap core CSS -->
<link href="/static/css/bootstrap.min.css?v=ec3bb52a00e176a7181d454dffaea219" rel="stylesheet">
<!-- Custom styles for this template -->
<link href="/static/css/jumbotron-narrow.css?v=166844ff66a82256d62737c8a6fc14bf" rel="stylesheet">
</head>
<!--We still have some surprise for admin.password-->
<body>
<div class="container">
感觉是和编码有关,搜了一下,需要用到unicode编码绕过
使用Unicode - Compart,查找一个大于1337的字符,在搜索框中搜索thousand
这个字符对应5000,点击查看详情
可以看到对应的utf-8格式: 0xE2 0x86 0x81
进行对应的url编码: %E2%86%81
在id框输入4,在价格框中输入%E2%86%81 ,点击parchase
拿到flag flag{1d506b75-536c-40bd-a0bf-052d66ef973a}