【学习笔记16】buu [SUCTF 2019]Pythonginx

 

 

打开一看发现给了一堆代码这样看不方便我们就去查看源码

 

 

 

        @app.route('/getUrl', methods=['GET', 'POST'])

def getUrl():

    url = request.args.get("url")

    host = parse.urlparse(url).hostname

    if host == 'suctf.cc':

        return "我扌 your problem? 111"

    parts = list(urlsplit(url))

    host = parts[1]

    if host == 'suctf.cc':

        return "我扌 your problem? 222 " + host

    newh