HCTF-2018-Official-Writeup

轉載至官方writeupjavascript Web Warmup web簽到php 首先打開而後看F12啦，註釋裏提示是source.php，php審計，問題出在html $_page = urldecode($page); $_page = mb_substr( $_page, 0, mb_strpos($_page . '?', '?') ); if (in_arra

>>阅读原文<<