{"id":531,"date":"2021-11-25T20:28:27","date_gmt":"2021-11-25T12:28:27","guid":{"rendered":"https:\/\/axinyi.xuenixiang.com\/?p=531"},"modified":"2021-11-25T21:11:48","modified_gmt":"2021-11-25T13:11:48","slug":"gongfangshijie-wp","status":"publish","type":"post","link":"https:\/\/axinyi.xuenixiang.com\/index.php\/2021\/11\/25\/gongfangshijie-wp\/","title":{"rendered":"\u653b\u9632\u4e16\u754c\u65b0\u624b\u533awp"},"content":{"rendered":"\n

\u7b2c\u4e00\u9898\uff1aview_source<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n

\u6839\u636e\u9898\u76ee\u63cf\u8ff0\uff0c\u67e5\u770b\u6e90\u4ee3\u7801ctrl+u<\/p>\n\n\n\n

\"\"<\/figure>\n\n\n\n

\u53d1\u73b0flag<\/p>\n\n\n\n

cyberpeace{aa33e5cf6a924396964615dc5acc854f}<\/code><\/pre>\n\n\n\n
<\/p>\n\n\n\n
\u7b2c\u4e8c\u9898\uff1arobots<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u6839\u636e\u9898\u76ee\u63cf\u8ff0\u67e5\u770brobots\u534f\u8bae\u5185\u5bb9\uff0c\u8bbf\u95ee\/robots.txt<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u53d1\u73b0flag\u5730\u5740\uff0c\u6839\u636erobots\u534f\u8bae\u91cc\u83b7\u5f97\u7684\u5730\u5740\uff0c\u8bbf\u95eeflag\u6587\u4ef6<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u53d1\u73b0flag<\/p>\n\n\n\n
cyberpeace{92aae6dbae2e0846fd2ec37f5926a469}<\/code><\/pre>\n\n\n\n
<\/p>\n\n\n\n
\u7b2c\u4e09\u9898\uff1abackup<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u6839\u636e\u9898\u76ee\u63cf\u8ff0\uff0c\u5728index.php\u6587\u4ef6\u540e\u9762\u6dfb\u52a0\u5e38\u7528\u5907\u4efd\u6587\u4ef6\u62d3\u5c55\u540d .bak<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u4e0b\u8f7d\u5907\u4efd\u6587\u4ef6\u67e5\u770b<\/p>\n\n\n\n
\u53d1\u73b0flag<\/p>\n\n\n\n
Cyberpeace{855A1C4B3401294CB6604CCC98BDE334}<\/code><\/pre>\n\n\n\n
<\/p>\n\n\n\n
\u7b2c\u56db\u9898\uff1acookie<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u6839\u636e\u63d0\u793a\u5f97\u77e5cookie\u91cc\u6709\u4e1c\u897f\uff0c\u6253\u5f00\u6d4f\u89c8\u5668\u5f00\u53d1\u8005\u5de5\u5177\uff0c\u5e76\u91cd\u65b0\u8f7d\u5165\u6293\u5305\u83b7\u53d6cookie<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u53d1\u73b0\u4e00\u4e2a\u5730\u5740\uff0c\u8bbf\u95ee\u6b64\u5730\u5740<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u8bbf\u95ee\u540e\u9875\u9762\u56de\u663e See the http response \u67e5\u770bhttp\u54cd\u5e94<\/p>\n\n\n\n
\u5229\u7528\u5f00\u53d1\u8005\u5de5\u5177\u91cd\u65b0\u6293\u5305\u67e5\u770b\u54cd\u5e94\u5305<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u53d1\u73b0flag<\/p>\n\n\n\n
cyberpeace{c37de51af970335a2b92bc5742a8fc82}<\/code><\/pre>\n\n\n\n
<\/p>\n\n\n\n
\u7b2c\u4e94\u9898\uff1adisabled_button<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u6839\u636e\u9898\u76ee\u63cf\u8ff0\u731c\u6d4b\u672c\u9898\u8003\u70b9\u662f\u524d\u7aef\u77e5\u8bc6\uff0c\u9996\u5148\u67e5\u770b\u6e90\u4ee3\u7801<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u53d1\u73b0disabled\u5143\u7d20\uff0c\u5220\u9664\u6b64\u5143\u7d20\uff0c\u53d1\u73b0\u6309\u94ae\u53ef\u4ee5\u70b9\u51fb\u3002\u70b9\u51fb\u6309\u94ae\u3002<\/p>\n\n\n\n
\u53d1\u73b0flag<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
cyberpeace{71dcd5db7f61196f70f22d11de844e87}<\/code><\/pre>\n\n\n\n
<\/p>\n\n\n\n
\u7b2c\u516d\u9898\uff1aweak_auth<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u53d1\u73b0\u4e00\u4e2a\u6ca1\u6709\u9a8c\u8bc1\u7801\u7684\u767b\u5f55\u7a97\u53e3\uff0c\u5f31\u5bc6\u7801\u731c\u6d4b\u4e00\u4e0b\uff0cadmin\/111111<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u4f7f\u7528bp\u6293\u5305\uff0c\u5e76\u5c06\u5bc6\u7801\u8bbe\u7f6e\u6210\u53c2\u6570\uff0c\u5bfc\u5165\u5b57\u5178\u7206\u7834\u3002<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u7206\u7834\u6210\u529f\uff0c\u5bc6\u7801\u662f123456\uff0c\u5728\u9875\u9762\u8f93\u5165\u8d26\u53f7\u5bc6\u7801\uff1aadmin\/123456<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u53d1\u73b0flag<\/p>\n\n\n\n
cyberpeace{0c7d10a91ed6138d90216b8c2c47d49c}<\/code><\/pre>\n\n\n\n
<\/p>\n\n\n\n
\u7b2c\u4e03\u9898\uff1asimple_php<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u53d1\u73b0\u4e00\u6bb5php\u4ee3\u7801\uff0c\u8fdb\u884c\u4ee3\u7801\u5ba1\u8ba1<\/p>\n\n\n\n
<?php\nshow_source(__FILE__);\ninclude(\"config.php\");  \/*\u5305\u542bconfig.php\u6587\u4ef6*\/\n$a=@$_GET['a'];\n$b=@$_GET['b'];\nif($a==0 and $a){\n    echo $flag1;\n}\nif(is_numeric($b)){ \n    exit();\n}  \/*\u68c0\u6d4b\u53d8\u91cfb\u662f\u5426\u4e3a\u6570\u5b57\u6216\u6570\u5b57\u5b57\u7b26\u4e32*\/\nif($b>1234){\n    echo $flag2;\n}\n?><\/code><\/pre>\n\n\n\n
\u901a\u8fc7\u4ee3\u7801\u5ba1\u8ba1\u5f97\u51fapayload<\/p>\n\n\n\n
http:\/\/111.200.241.244:64291\/?a=0asd&b=2345 a<\/code><\/pre>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u5f97\u51faflag<\/p>\n\n\n\n
Cyberpeace{647E37C7627CC3E4019EC69324F66C7C} <\/code><\/pre>\n\n\n\n
<\/p>\n\n\n\n
\u7b2c\u516b\u9898\uff1aget_post<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u6839\u636e\u9875\u9762\u63d0\u793a\uff0c\u4ee5get\u65b9\u5f0f\u4f20\u53c2\u53d8\u91cfa=1<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u540c\u65f6\u4ee5post\u65b9\u5f0f\u4f20\u53c2\u53d8\u91cfb=2<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u5f97\u5230flag<\/p>\n\n\n\n
cyberpeace{263c60dd6d3627805309b962262f104d}<\/code><\/pre>\n\n\n\n
<\/p>\n\n\n\n
\u7b2c\u4e5d\u9898\uff1axff_referer<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u9875\u9762\u663e\u793aip\u5730\u5740\u5fc5\u987b\u4e3a123.123.123.123<\/p>\n\n\n\n
\u901a\u8fc7bp\u6293\u5305\u4f2a\u9020xff<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u9875\u9762\u56de\u663e\u5fc5\u987b\u6765\u81eawww.googie.com<\/p>\n\n\n\n
\u4fee\u6539\u6570\u636e\u5305\u4f2a\u9020referer<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u5f97\u5230flag<\/p>\n\n\n\n
cyberpeace{5754ee4e7789af3878dcc28f1a3901f1}<\/code><\/pre>\n\n\n\n
<\/p>\n\n\n\n
\u7b2c\u5341\u9898\uff1awebshell<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u9898\u76ee\u63cf\u8ff0\u5f97\u77e5\uff0cindex.php\u91cc\u5b58\u5728\u4e00\u53e5\u8bdd\u6728\u9a6c<\/p>\n\n\n\n
\u76f4\u63a5post\u65b9\u5f0f\u8c03\u7528<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u53d1\u73b0\u6709\u4e2aflag.txt\u6587\u4ef6\uff0c\u67e5\u770b\u6587\u4ef6\u5185\u5bb9\u3002<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u53d1\u73b0flag<\/p>\n\n\n\n
cyberpeace{2765ff4db8bda09b272ff0518654df3d}<\/code><\/pre>\n\n\n\n
<\/p>\n\n\n\n
\u7b2c\u5341\u4e00\u9898\uff1acommand_execution<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u8f93\u5165127.0.0.1|find \/ -name \u201cflag.txt\u201d<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u8f93\u5165127.0.0.1|cat \/home\/flag.txt<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u5f97\u5230flag<\/p>\n\n\n\n
cyberpeace{cd5ede8e07747afc4fa495ac618f6e6b}<\/code><\/pre>\n\n\n\n
<\/p>\n\n\n\n
\u7b2c\u5341\u4e8c\u9898\uff1asimple_js<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u8f93\u5165\u5f31\u5bc6\u7801\u6d4b\u8bd5<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u53d1\u73b0\u65e0\u8bba\u8f93\u5165\u4ec0\u4e48\u5bc6\u7801\u663e\u793a\u7ed3\u679c\u90fd\u4e00\u6837<\/p>\n\n\n\n
\u67e5\u770b\u6e90\u7801<\/p>\n\n\n\n
\"\"<\/figure>\n\n\n\n
\u53d1\u73b0\u8fd9\u6bb5JS\u4ee3\u7801\u8868\u793a\u5b8c\u5168\u65e0\u8bba\u6211\u4eec\u8f93\u5165\u7684\u4ec0\u4e48\u5185\u5bb9\uff0c\u7ed3\u679c\u90fd\u662f\u4e00\u6837\u7684\uff0c\u6240\u4ee5\u5224\u65ad\u8fd9\u6bb5\u4ee3\u7801\u65e0\u7528\u3002<\/p>\n\n\n\n
\u6709\u7528\u7684\u662f<\/p>\n\n\n\n
 String[\"fromCharCode\"](dechiffre(\"\\x35\\x35\\x2c\\x35\\x36\\x2c\\x35\\x34\\x2c\\x37\\x39\\x2c\\x31\\x31\\x35\\x2c\\x36\\x39\\x2c\\x31\\x31\\x34\\x2c\\x31\\x31\\x36\\x2c\\x31\\x30\\x37\\x2c\\x34\\x39\\x2c\\x35\\x30\"));<\/code><\/pre>\n\n\n\n
\u5199python\u811a\u672c\u8fdb\u884c\u8f6c\u7801\u5373\u53ef\uff1a<\/p>\n\n\n\n
string = \"\\x35\\x35\\x2c\\x35\\x36\\x2c\\x35\\x34\\x2c\\x37\\x39\\x2c\\x31\\x31\\x35\\x2c\\x36\\x39\\x2c\\x31\\x31\\x34\\x2c\\x31\\x31\\x36\\x2c\\x31\\x30\\x37\\x2c\\x34\\x39\\x2c\\x35\\x30\"\ns = string.split(\",\")\nc = \"\"\nfor i in s:\n    i = chr(int(i))\n    c = c+i\nprint(c)<\/code><\/pre>\n\n\n\n
\u7ed3\u679c\u4e3a:786OsErtk12<\/p>\n\n\n\n
\u5f97\u5230flag<\/p>\n\n\n\n
Cyberpeace{786OsErtk12}<\/code><\/pre>\n\n\n\n
<\/p>\n","protected":false},"excerpt":{"rendered":"
\u7b2c\u4e00\u9898\uff1aview_source \u6839\u636e\u9898\u76ee\u63cf\u8ff0\uff0c\u67e5\u770b\u6e90\u4ee3\u7801ctrl+u \u53d1\u73b0flag \u7b2c\u4e8c\u9898\uff1arobots \u6839\u636e\u9898\u76ee\u63cf\u8ff0\u67e5\u770brobo …<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/posts\/531"}],"collection":[{"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/comments?post=531"}],"version-history":[{"count":5,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/posts\/531\/revisions"}],"predecessor-version":[{"id":586,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/posts\/531\/revisions\/586"}],"wp:attachment":[{"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/media?parent=531"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/categories?post=531"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/tags?post=531"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}