【学习笔记15】buu [BUUCTF 2018]Online Tool

打开一看，发现给了一大串代码，接下来进行审计 if (isset($_SERVER['HTTP_X_FORWARDED_FOR'])) { $_SERVER['REMOTE_ADDR'] = $_SERVER['HTTP_X_FORWARDED_FOR']; }                 //首先看到前两行代码X_FORWARDED_FOR和REMOTE_ADDR这里是让服务器用来获取ip用

>>阅读原文<<