【學習筆記15】buu [BUUCTF 2018]Online Tool

打開一看，發現給了一大串代碼，接下來進行審計 if (isset($_SERVER['HTTP_X_FORWARDED_FOR'])) { $_SERVER['REMOTE_ADDR'] = $_SERVER['HTTP_X_FORWARDED_FOR']; }                 //首先看到前兩行代碼X_FORWARDED_FOR和REMOTE_ADDR這裏是讓服務器用來獲取ip用

>>阅读原文<<