CSAW CTF 2016 mfw Writeup

weixin_43622501

于 2019-03-31 22:07:40 发布

阅读量1.1k

点赞数 1

分类专栏： WEB-WP 文章标签： WP

本文链接：https://blog.csdn.net/weixin_43622501/article/details/88936759

版权

这篇博客详细介绍了在CSAW CTF 2016比赛中关于mfw挑战的解决思路。作者探讨了本地文件包含漏洞和git源码泄露问题，提到了PHP的include和require可能导致的安全风险，并给出利用这些漏洞的payload。通过访问.git目录获取源码，使用GitHack工具克隆网站代码，最终通过修改输入参数利用assert语句执行系统命令来获取flag。

摘要由CSDN通过智能技术生成

CSAW CTF 2016 mfw Writeup

0x01 需要知道的##

本地文件包含
git源码泄露

0x02 本地文件包含

来自维基百科的解释：

In PHP the main cause is due to the use of unvalidated user-input with a filesystem function that includes a file for execution.

** most notable are the include and require statements.**

Most of the vulnerabilities can be attributed to novice programmers not being familiar with all of the capabilities of the PHP programming language. The PHP language has a directive which, if enabled,

** allows filesystem functions to use a URL to retrieve data from remote locations**.[1]

The directive is allow_url_fopen in PHP versions <= 4.3.4 and allow_url_include since PHP 5.2.0. In PHP 5.x this directive is disabled by default, in prior versions it was enabled by default.[2] To exploit the vulnerabil