Bugku web——秋名山老司机

打开题目链接，有下面信息:

此题为反向post题，需要先发起一次get请求，获取计算式，然后再将计算结果post回去，我们可以通过些python脚本实现上述步骤

import requests
from bs4 import BeautifulSoup
import re
import time

url = "http://123.206.87.240:8002/qiumingshan/"

s = requests.session()

html = s.get(url)

bsobj = BeautifulSoup(html.content,'lxml')
ptr = bsobj.find(name='div')

a = ptr.prettify()

fl1=re.compile("<div>")
fl2=re.compile("</div>")
fl3=re.compile("=\?;")
fl4=re.compile(" ")

b = fl1.sub('', a)
c = fl2.sub('', b)
d = fl3.sub('', c)
e = fl4.sub('',d)

f = eval(e)

print(f)

time.sleep(0.5)

data = {'value':f}

r = s.post(url=url,data=data)

print(r.content)

执行代码即可获得flag