{"id":959,"date":"2022-04-26T12:23:02","date_gmt":"2022-04-26T04:23:02","guid":{"rendered":"https:\/\/axinyi.xuenixiang.com\/?p=959"},"modified":"2022-04-26T12:23:03","modified_gmt":"2022-04-26T04:23:03","slug":"%e6%94%bb%e9%98%b2%e4%b8%96%e7%95%8cwp-cat","status":"publish","type":"post","link":"https:\/\/axinyi.xuenixiang.com\/index.php\/2022\/04\/26\/%e6%94%bb%e9%98%b2%e4%b8%96%e7%95%8cwp-cat\/","title":{"rendered":"\u653b\u9632\u4e16\u754cwp-Cat"},"content":{"rendered":"\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"479\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-15-1024x479.png\" alt=\"\" class=\"wp-image-960\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-15-1024x479.png 1024w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-15-300x140.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-15-768x359.png 768w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-15.png 1027w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p class=\"has-medium-font-size\"><strong>\u8bbf\u95ee\u9898\u76ee\u73af\u5883<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"383\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-16-1024x383.png\" alt=\"\" class=\"wp-image-961\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-16-1024x383.png 1024w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-16-300x112.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-16-768x287.png 768w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-16-1536x574.png 1536w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-16.png 1558w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<h2>1.1\u4fe1\u606f\u641c\u96c6<\/h2>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-19.png\" alt=\"\" class=\"wp-image-964\" width=\"839\" height=\"268\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-19.png 667w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-19-300x96.png 300w\" sizes=\"(max-width: 839px) 100vw, 839px\" \/><\/figure>\n\n\n\n<figure class=\"wp-block-table\"><table><tbody><tr><td>Server<\/td><td>nginx\/1.10.3 (Ubuntu)<\/td><\/tr><\/tbody><\/table><\/figure>\n\n\n\n<p class=\"has-medium-font-size\"><strong>\u5728\u8f93\u5165\u6846\u8f93\u5165\u63d0\u793a\u7684\u57df\u540dloli.club\u53d1\u73b0\u6ca1\u6709\u54cd\u5e94\uff0c\u89c2\u5bdfurl<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" width=\"897\" height=\"360\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-17.png\" alt=\"\" class=\"wp-image-962\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-17.png 897w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-17-300x120.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-17-768x308.png 768w\" sizes=\"(max-width: 897px) 100vw, 897px\" \/><\/figure>\n\n\n\n<p class=\"has-medium-font-size\"><strong>\u53d1\u73b0\u662fget\u4f20\u53c2\uff0c\u5728\u8f93\u5165\u6846\u4e2d\u8f93\u5165\u7684\u6570\u636e\u4f1a\u4ee5get\u4f20\u53c2\u5f62\u5f0f\u4e0a\u4f20<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"488\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-18-1024x488.png\" alt=\"\" class=\"wp-image-963\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-18-1024x488.png 1024w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-18-300x143.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-18-768x366.png 768w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-18.png 1038w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><strong>\u5f53\u8f93\u5165127.0.0.1\u672c\u5730\u56de\u73af\u5730\u5740\u65f6\uff0c\u51fa\u73b0\u56de\u663e\u4fe1\u606f\uff0c\u8bf4\u660e\u6b64\u8f93\u5165\u6846\u529f\u80fd\u8ddfshell\u5dee\u4e0d\u591a\u3002<\/strong><\/p>\n\n\n\n<p><strong>\u5c1d\u8bd5\u4f7f\u7528\u7ba1\u9053\u8fdb\u884c\u547d\u4ee4\u6267\u884c\uff0c\u8f93\u5165 127.0.0.1 | ls\uff0c\u7136\u800c\u5f97\u5230\u7684\u56de\u663e\u662fInvalid URL\uff0c127.0.0.1 | phpinfo \u7684\u6267\u884c\u7ed3\u679c\u4e5f\u662f Invalid URL\uff0c\u770b\u6765\u547d\u4ee4\u6267\u884c\u65f6\u884c\u4e0d\u901a\u4e86\u3002<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"465\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-20-1024x465.png\" alt=\"\" class=\"wp-image-965\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-20-1024x465.png 1024w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-20-300x136.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-20-768x349.png 768w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-20.png 1063w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><strong>\u5728 URL \u7684\u4f20\u53c2\u5904?url=\u8fd9\u91cc\uff0c\u6211\u4eec\u4f20\u9012\u4e2a%79 \u53d1\u73b0\u4f20\u9012\u4e4b\u540e\u53d8\u6210\u4e86?url=w,\u770b\u6765\u662f\u53ef\u4ee5\u4f20\u9012 url \u7f16\u7801\uff0c\u7cfb\u7edf\u4f1a\u63a5\u53d7\u5e76\u8fdb\u884c\u89e3\u6790\uff0c\u4e8e\u662f\u6211\u4eec\u4f20\u9012%80 \u4f1a\u51fa\u73b0\u62a5\u9519\uff0curl \u7f16\u7801\u4f7f\u7528\u7684\u662f 16 \u8fdb\u5236\uff0c80 \u4e5f\u5c31\u662f 128\uff0cASCII \u7801\u662f\u4ece 0-127\uff0c\u6240\u4ee5\u8fd9\u4e2a\u65f6\u5019\u4f1a\u62a5\u9519\u3002<\/strong><\/p>\n\n\n\n<p><strong>url \u7f16\u7801\u8868\u53ef\u4ee5\u53c2\u8003<\/strong><\/p>\n\n\n\n<blockquote class=\"wp-block-quote\"><p><strong>http:\/\/www.w3school.com.cn\/tags\/html_ref_urlencode.html<\/strong><\/p><\/blockquote>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"507\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-21-1024x507.png\" alt=\"\" class=\"wp-image-966\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-21-1024x507.png 1024w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-21-300x148.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-21-768x380.png 768w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-21-1536x760.png 1536w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-21.png 1920w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p><strong>\u67e5\u770b\u62a5\u9519\u4fe1\u606f\u53ef\u4ee5\u53d1\u73b0\u662f\u4e00\u4e2apython\u7ad9\uff0c\u5e76\u4e14\u4f7f\u7528Django \u6846\u67b6<\/strong><\/p>\n\n\n\n<h2>1.2\u89e3\u9898<\/h2>\n\n\n\n<p><strong>\u5728\u6bd4\u8d5b\u7684\u65f6\u5019\u6709\u4e2a\u63d0\u793a\uff1a<\/strong><br>RTFM of PHP CURL===>>read the fuck manul of PHP CURL???<br><strong>\u662f\u5173\u4e8e php curl \u7684\uff0c\u7136\u800c\u6700\u4e3a\u83dc\u9e21\u6211\u5f53\u7136\u8fd8\u662f\u4e0d\u4f1a\u7684\uff0c\u770b\u5927\u4f6c\u4eec\u7684\u64cd\u4f5c\u662f\u627e\u5230<br>\u4e86\u4e00\u4e2a\u89e3\u9898\u70b9\uff1a<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image size-full is-resized\"><img loading=\"lazy\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/a24d1740e7224686a77188fbacf2139f.jpg\" alt=\"\" class=\"wp-image-967\" width=\"839\" height=\"321\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/a24d1740e7224686a77188fbacf2139f.jpg 650w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/a24d1740e7224686a77188fbacf2139f-300x115.jpg 300w\" sizes=\"(max-width: 839px) 100vw, 839px\" \/><\/figure>\n\n\n\n<p><strong>\u5e76\u4e14\u5728\u62a5\u9519\u4fe1\u606f\u4e2d\u627e\u5230datebase\u8def\u5f84<\/strong><\/p>\n\n\n\n<figure class=\"wp-block-image\"><img src=\"https:\/\/adworld.xctf.org.cn\/media\/task\/writeup\/cn\/Cat\/2.png\" alt=\"\"\/><\/figure>\n\n\n\n<pre class=\"wp-block-code\"><code>payload\uff1a?url=@\/opt\/api\/database.sqlite3<\/code><\/pre>\n\n\n\n<figure class=\"wp-block-image size-large\"><img loading=\"lazy\" width=\"1024\" height=\"442\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-22-1024x442.png\" alt=\"\" class=\"wp-image-968\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-22-1024x442.png 1024w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-22-300x129.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-22-768x331.png 768w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-22-1536x662.png 1536w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-22.png 1920w\" sizes=\"(max-width: 1024px) 100vw, 1024px\" \/><\/figure>\n\n\n\n<p>\u5728\u56de\u663e\u4e2d\u641c\u641cCTF\u6216\u8005flag\u7b49\u5173\u952e\u5b57<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><img loading=\"lazy\" width=\"802\" height=\"292\" src=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-23.png\" alt=\"\" class=\"wp-image-969\" srcset=\"https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-23.png 802w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-23-300x109.png 300w, https:\/\/axinyi.xuenixiang.com\/wp-content\/uploads\/2022\/04\/\u56fe\u7247-23-768x280.png 768w\" sizes=\"(max-width: 802px) 100vw, 802px\" \/><\/figure>\n\n\n\n<p>\u5f97\u5230Flag: WHCTF{yoooo_Such_A_G00D_@} <\/p>\n\n\n\n<p><div class=\"has-toc have-toc\"><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u8bbf\u95ee\u9898\u76ee\u73af\u5883 1.1\u4fe1\u606f\u641c\u96c6 Server nginx\/1.10.3 (Ubuntu) \u5728\u8f93\u5165\u6846\u8f93\u5165\u63d0\u793a\u7684\u57df\u540dloli.club\u53d1 &#8230;<\/p>","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":[],"categories":[1],"tags":[],"_links":{"self":[{"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/posts\/959"}],"collection":[{"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/comments?post=959"}],"version-history":[{"count":1,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/posts\/959\/revisions"}],"predecessor-version":[{"id":970,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/posts\/959\/revisions\/970"}],"wp:attachment":[{"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/media?parent=959"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/categories?post=959"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/axinyi.xuenixiang.com\/index.php\/wp-json\/wp\/v2\/tags?post=959"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}