<?php
include("flag.php");
highlight_file(__FILE__);
if(isset($_GET['num'])){
$num = $_GET['num'];
if($num==4476){
die("no no no!");
}
if(preg_match("/[a-z]/i", $num)){
die("no no no!");
}
if(intval($num,0)==4476){
echo $flag;
}else{
echo intval($num,0);
}
}
分析:正则匹配过滤了十六进制,那就改用八进制
输入:
http://da2ae78c-71cd-4963-aca4-d467f8d90d17.challenge.ctf.show/?num=010574