{"id":104,"date":"2022-05-16T19:38:44","date_gmt":"2022-05-16T11:38:44","guid":{"rendered":"http:\/\/162.14.82.114\/?p=104"},"modified":"2022-09-23T00:44:24","modified_gmt":"2022-09-22T16:44:24","slug":"ctfshow%e4%bf%a1%e6%81%af%e6%b3%84%e9%9c%b2","status":"publish","type":"post","link":"http:\/\/162.14.82.114\/index.php\/104\/05\/16\/2022\/","title":{"rendered":"ctfhub&#8211;\u4fe1\u606f\u6cc4\u9732\u505a\u9898\u8bb0\u5f55"},"content":{"rendered":"<h1>ctfhub\u4fe1\u606f\u6cc4\u9732<\/h1>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936593.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936593.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123001918522\" \/><\/div><\/p>\n<h2>\u76ee\u5f55\u904d\u5386<\/h2>\n<h3>\u9898\u76ee\u80cc\u666f<\/h3>\n<p>\u76ee\u5f55\u904d\u5386\u662fweb\u4e2d\u5e38\u89c1\u7684\u57fa\u7840\u64cd\u4f5c\uff0c\u6211\u4eec\u901a\u5e38\u4f1a\u901a\u8fc7\u76ee\u5f55\u7684\u904d\u5386\u6765\u53d1\u73b0\u662f\u5426\u5b58\u5728\u5bf9\u6211\u4eec\u6709\u7528\u7684\u4fe1\u606f\u3002<\/p>\n<h3>\u89e3\u7b54\u9898\u76ee<\/h3>\n<p>\u9996\u5148\u6253\u5f00\u9776\u673a\uff0c\u542f\u52a8\u73af\u5883\uff0c\u53ef\u4ee5\u770b\u5230\u662f\u4e00\u4e2aApach\u76ee\u5f55\u7684\u904d\u5386<\/p>\n<blockquote>\n<p>\u76ee\u5f55\u904d\u5386<\/p>\n<ul>\n<li>\u9996\u5148F12\u4e00\u4e0b\uff0c\u770b\u770b\u6709\u6ca1\u6709\u4ec0\u4e48\u60ca\u559c\uff0c\u4f46\u662f\u6ca1\u6709\u4ec0\u4e48\u6536\u83b7\u3002<\/li>\n<li>\u70b9\u5f00\u201c\u70b9\u51fb\u5f00\u59cb\u5bfb\u627eflag\u201d<\/li>\n<\/ul>\n<\/blockquote>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936595.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936595.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220122233255742\" style=\"zoom: 50%;\" \/><\/div><br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936596.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936596.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123000413392\" style=\"zoom:33%;\" \/><\/div><\/p>\n<p>\u6709\u4e24\u79cd\u601d\u8def\uff1a<\/p>\n<ol>\n<li>\u4e00\u4e2a\u4e00\u4e2a\u70b9\uff0c\u6328\u4e2a\u67e5\u8be2\u4e0b\u5217\u7684\u5b50\u76ee\u5f55\uff0c\u53ef\u4ee5\u5728\u6700\u540e\u76843\/4\u4e0b\u627e\u5230flag.txt\u6587\u4ef6\u3002<\/li>\n<li>\u5229\u7528python\u811a\u672c\u7684requests\u5e93\u8fdb\u884c\u67e5\u8be2\uff0c\u811a\u672c\u5728\u4e0b\u9762\u3002<\/li>\n<\/ol>\n<pre><code class=\"language-python\">#! \/usr\/bin\/env python\n# _*_  coding:utf-8 _*_\nimport requests\nurl = &quot;http:\/\/challenge-88fe15103038d8b0.sandbox.ctfhub.com:10080\/flag_in_here&quot;\nfor i in range(5):\n    for j in range(5):\n        url_menu = url + &quot;\/&quot; + str(i) + &quot;\/&quot; + str(j)\n        r = requests.get(url_menu)\n        r.encoding = &quot;utf-8&quot;\n        get_file = r.text\n        if &quot;flag.txt&quot; in get_file:\n            print(url_menu)<\/code><\/pre>\n<p>\u4ee5\u4e0a\u5c31\u662f\u811a\u672c\uff0c\u6700\u540e<code>python3 find_flag.py<\/code>\u8fd0\u884c\u5373\u53ef<\/p>\n<blockquote>\n<pre><code class=\"language-python\">#!\/usr\/bin\/env python\n#-*- coding: utf-8 -*-\n\u7b2c\u4e00\u884c\u6ce8\u91ca\u4e8b\u4e3a\u4e86\u544a\u8bc9Linux\/OS X\u7cfb\u7edf\uff0c\u8fd9\u662f\u4e00\u4e2aPython\u53ef\u6267\u884c\u7a0b\u5e8f\uff0cWindows\u7cfb\u7edf\u4f1a\u5ffd\u7565\u8fd9\u4e2a\u6ce8\u91ca\uff1b\n\u7b2c\u4e8c\u884c\u6ce8\u91ca\u5e02\u4e3a\u4e86\u544a\u8bc9Python\u89e3\u91ca\u5668\uff0c\u6309\u7167UTF-8\u7f16\u7801\u8bfb\u53d6\u6e90\u4ee3\u7801\uff0c\u5426\u5219\uff0c\u5728\u6e90\u4ee3\u7801\u4e2d\u5199\u7684\u4e2d\u6587\u8f93\u51fa\u53ef\u80fd\u4f1a\u6709\u4e71\u7801\u3002<\/code><\/pre>\n<\/blockquote>\n<h2>PHPINFO<\/h2>\n<h3>\u9898\u76ee\u80cc\u666f<\/h3>\n<blockquote>\n<p>phpinfo \u2014 \u8f93\u51fa\u5173\u4e8e PHP \u914d\u7f6e\u7684\u4fe1\u606f<\/p>\n<p>\u8f93\u51fa PHP \u5f53\u524d\u72b6\u6001\u7684\u5927\u91cf\u4fe1\u606f\uff0c\u5305\u542b\u4e86 PHP \u7f16\u8bd1\u9009\u9879\u3001\u542f\u7528\u7684\u6269\u5c55\u3001PHP  \u7248\u672c\u3001\u670d\u52a1\u5668\u4fe1\u606f\u548c\u73af\u5883\u53d8\u91cf\uff08\u5982\u679c\u7f16\u8bd1\u4e3a\u4e00\u4e2a\u6a21\u5757\u7684\u8bdd\uff09\u3001PHP\u73af\u5883\u53d8\u91cf\u3001\u64cd\u4f5c\u7cfb\u7edf\u7248\u672c\u4fe1\u606f\u3001path \u53d8\u91cf\u3001\u914d\u7f6e\u9009\u9879\u7684\u672c\u5730\u503c\u548c\u4e3b\u503c\u3001HTTP  \u5934\u548cPHP\u6388\u6743\u4fe1\u606f(License)\u3002  <\/p>\n<p>\u56e0\u4e3a\u6bcf\u4e2a\u7cfb\u7edf\u5b89\u88c5\u5f97\u6709\u6240\u4e0d\u540c\uff0c<strong>phpinfo()<\/strong> \u5e38\u7528\u4e8e\u5728\u7cfb\u7edf\u4e0a\u68c0\u67e5 <a href=\"https:\/\/www.php.net\/manual\/zh\/configuration.php\">\u914d\u7f6e\u8bbe\u7f6e<\/a>\u548c  <a href=\"https:\/\/www.php.net\/manual\/zh\/language.variables.predefined.php\">\u9884\u5b9a\u4e49\u53d8\u91cf<\/a>\u3002  <\/p>\n<p><strong>phpinfo()<\/strong> \u540c\u65f6\u662f\u4e2a\u5f88\u6709\u4ef7\u503c\u7684\u3001\u5305\u542b\u6240\u6709 EGPCS(Environment, GET, POST, Cookie, Server) \u6570\u636e\u7684\u8c03\u8bd5\u5de5\u5177\u3002  <\/p>\n<\/blockquote>\n<h3>\u89e3\u7b54\u9898\u76ee<\/h3>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936597.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936597.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123001321369\" style=\"zoom:33%;\" \/><\/div><\/p>\n<p>\u70b9\u51fb\u201c\u70b9\u51fb\u67e5\u770bphpinfo\u201d\uff0c\u8fdb\u5165\u5982\u4e0b\u754c\u9762\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936598.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936598.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123001520447\" style=\"zoom: 33%;\" \/><\/div><\/p>\n<p>\u968f\u624b<code>ctrl+f<\/code>\u641c\u7d22\u4e00\u4e0bflag\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936599.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936599.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123001619782\" style=\"zoom: 33%;\" \/><\/div><\/p>\n<p>\u7a81\u7136\u53d1\u73b0\u4e86\u5b9d\u85cf\uff1a<\/p>\n<pre><code class=\"language-markdown\">ctfhub{780dc5e53d1c76308084bec3}\n> \u6ce8\u610f\u522b\u628a\u7a7a\u683c\u590d\u5236\u4e86\uff0c\u4f1a\u5bfc\u81f4\u63d0\u4ea4\u9519\u8bef\u5662\uff01<\/code><\/pre>\n<p>\u63d0\u4ea4\u6b63\u786e\u3002<\/p>\n<h2>\u5907\u4efd\u6587\u4ef6\u4e0b\u8f7d<\/h2>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936600.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936600.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123002428480\" style=\"zoom: 67%;\" \/><\/div><\/p>\n<h3>\u7f51\u7ad9\u6e90\u7801<\/h3>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936601.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936601.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123002950073\" style=\"zoom: 33%;\" \/><\/div><\/p>\n<h4>\u9898\u89e3\u4e00\uff1a<\/h4>\n<p>\u5148\u6309\u4ed6\u7ed9\u7684\u7ebf\u7d22\u8fdb\u884cpython\u811a\u672c\u626b\u63cf\u3002\u811a\u672c\u5982\u4e0b\uff1a<\/p>\n<pre><code class=\"language-python\">#! \/usr\/bin\/env python\n# _*_  coding:utf-8 _*_\nimport requests\nurl=&quot;http:\/\/challenge-6a34ded4464be765.sandbox.ctfhub.com:10800\/&quot;\nlist1=[&#039;web&#039;, &#039;website&#039;, &#039;backup&#039;, &#039;back&#039;, &#039;www&#039;, &#039;wwwroot&#039;, &#039;temp&#039;]\nlist2=[&#039;tar&#039;, &#039;tar.gz&#039;, &#039;zip&#039;, &#039;rar&#039;]\nfor i in list1:\n    for j in list2:\n        url_f=url+i+&quot;.&quot;+j\n        r=requests.get(url_f)\n        if(r.status_code == 200):\n            print(url_f)<\/code><\/pre>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936602.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936602.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123003628945\" style=\"zoom: 50%;\" \/><\/div><\/p>\n<p>\u626b\u51fa\u4e86\u4e00\u4e2a\u540d\u4e3a<code>http:\/\/challenge-6a34ded4464be765.sandbox.ctfhub.com:10800\/www.zip<\/code>\u7684\u6587\u4ef6<\/p>\n<p>\u5728\u7f51\u5740\u680f\u8f93\u5165\u5f97\u5230\u4e00\u4e2a\u6587\u4ef6\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936603.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936603.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123003758332\" style=\"zoom:50%;\" \/><\/div><br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936604.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936604.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123003913633\" style=\"zoom:33%;\" \/><\/div><\/p>\n<p>\u6253\u5f00flag\u6587\u4ef6\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936605.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936605.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123003946492\" style=\"zoom:33%;\" \/><\/div><\/p>\n<p>\u7528\u4e0a\u9762\u7684\u7f51\u7ad9\u53bb\u8bbf\u95ee\u8be5\u6587\u4ef6\u5c31\u53ef\u4ee5\u5f97\u5230flag\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936606.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936606.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123004123797\" style=\"zoom: 50%;\" \/><\/div><\/p>\n<pre><code class=\"language-markdown\">ctfhub{110539f8cc74728417c0e261}<\/code><\/pre>\n<p>\u63d0\u4ea4\u5373\u53ef\uff01\uff01\uff01<\/p>\n<h4>\u9898\u89e3\u4e8c\uff1a<\/h4>\n<p>\u4f7f\u7528<code>dirsearch<\/code>\u8fdb\u884c\u626b\u63cf<code>.git<\/code>\u6cc4\u9732<\/p>\n<p><code>python3 dirsearch.py -u challenge-6a34ded4464be765.sandbox.ctfhub.com:10800 -e*<\/code><\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936607.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936607.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123010122609\" style=\"zoom:50%;\" \/><\/div><\/p>\n<p>\u5f97\u5230\u5982\u4e0a\u7ed3\u679c\uff08\u6211\u81ea\u5df1\u6ca1\u6709\u626b\u51fa\u6765\u4e0d\u77e5\u9053\u662f\u4ec0\u4e48\u539f\u56e0\uff09<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936608.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936608.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123012354564\" style=\"zoom: 50%;\" \/><\/div><\/p>\n<p>\u7136\u540e\u548c\u4e0a\u9762\u64cd\u4f5c\u4e00\u6837\u5c31\u53ef\u4ee5\u4e86\u3002<\/p>\n<h4>\u9898\u89e3\u4e09\uff1a<\/h4>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936609.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936609.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123011259911\" \/><\/div> <\/p>\n<p>\u4f7f\u7528<code>\u5fa1\u5251\u540e\u53f0\u626b\u63cf\u5de5\u5177<\/code>\u626b\u63cf\uff08\u672c\u9898\u4e2d\u8d85\u65f6\u8981\u8bbe\u7f6e\u4e3a10s , \u4e00\u822c\u6765\u8bf4\u8bbe\u7f6e\u4e3a3s\u5373\u53ef\uff09<\/p>\n<p>\u5f97\u5230\u6587\u4ef6\uff0c\u4f9d\u4e0a\u9762\u6b65\u9aa4\u7ee7\u7eed\u64cd\u4f5c\u5373\u53ef\u5f97\u5230\u6700\u7ec8\u7684flag<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/img-blog.csdnimg.cn\/20201111193108136.png?x-oss-process=image\/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NTY5NDM4OA==,size_16,color_FFFFFF,t_70#pic_center'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/img-blog.csdnimg.cn\/20201111193108136.png?x-oss-process=image\/watermark,type_ZmFuZ3poZW5naGVpdGk,shadow_10,text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L3dlaXhpbl80NTY5NDM4OA==,size_16,color_FFFFFF,t_70#pic_center\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\u5728\u8fd9\u91cc\u63d2\u5165\u56fe\u7247\u63cf\u8ff0\" \/><\/div><\/p>\n<h4>\u9898\u89e3\u56db\uff1a<\/h4>\n<p>\u4f7f\u7528<code>burpsuite<\/code>\u6839\u636e\u5b57\u5178\u8fdb\u884c\u5b50\u57df\u540d\u626b\u63cf\uff0c\u540c\u6837\u53ef\u5f97\u5230\u4e0a\u8ff0\u6587\u4ef6\u53caflag\u3002<\/p>\n<h3>bak\u6587\u4ef6<\/h3>\n<h4>\u80cc\u666f<\/h4>\n<p><strong>\u5f53\u5f00\u53d1\u4eba\u5458\u5728\u7ebf\u4e0a\u73af\u5883\u4e2d\u5bf9\u6e90\u4ee3\u7801\u8fdb\u884c\u4e86\u5907\u4efd\u64cd\u4f5c\uff0c\u5e76\u4e14\u5c06\u5907\u4efd\u6587\u4ef6\u653e\u5728\u4e86 web \u76ee\u5f55\u4e0b\uff0c\u5c31\u4f1a\u5f15\u8d77\u7f51\u7ad9\u6e90\u7801\u6cc4\u9732\u3002<\/strong><\/p>\n<h4>\u9898\u89e3\u4e00:<\/h4>\n<p>\u9996\u5148\u6253\u5f00\u9776\u573a\uff0c\u5f97\u5230\u4e0b\u5217\u56fe\u7247\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936610.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936610.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123102428764\" style=\"zoom:50%;\" \/><\/div><\/p>\n<p>\u9898\u76ee\u4e0a\u8bf4\u4e86\u662fbak\u6cc4\u9732\u4e86\uff0c\u5c31\u5728\u5730\u5740\u680f\u540e\u9762\u63a5\u4e0a<code>index.php.bak<\/code>\u3002\u51fa\u73b0\u4e00\u4e2a\u4e0b\u8f7d\u6587\u4ef6\uff0c\u5982\u56fe\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936611.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936611.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123102658939\" style=\"zoom:33%;\" \/><\/div><\/p>\n<p>\u6211\u8fd9\u4e0a\u9762\u8fd9\u4e2a\u663e\u793a\u662f\u56e0\u4e3a\u6211\u5b89\u88c5\u4e86autoCAD\uff0c\u8fd9\u4e2a\u8f6f\u4ef6\u4e5f\u6709bak\u6587\u4ef6\uff0c\u540c\u6837\u662f\u5907\u4efd\u6587\u4ef6\uff0c\u6362\u4e2a\u6253\u5f00\u65b9\u5f0f\u5c31\u53ef\u4ee5\u4e86\u3002<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936612.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936612.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123102948190\" style=\"zoom:50%;\" \/><\/div><\/p>\n<p>Capture the flag\uff01<\/p>\n<pre><code>ctfhub{b583b93ab1b0531b80dee8bc}<\/code><\/pre>\n<h4>\u9898\u89e3\u4e8c\uff1a<\/h4>\n<p>\u5728cmder\/cmd \u5229\u7528 curl \u4e5f\u53ef\u4ee5\u5f97\u5230flag\uff0c\u4e14\u4e0d\u7528\u4e0b\u8f7d\u6587\u4ef6\uff08\u5f3a\u8feb\u75c7\u72c2\u559c\uff01\uff01\uff01\uff09<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936613.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936613.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123103339830\" style=\"zoom: 50%;\" \/><\/div><\/p>\n<h4>\u9898\u89e3\u4e09\uff1a<\/h4>\n<p>\u4e0d\u770b\u9898\u76ee\uff0c\u76f4\u63a5\u62ff<code>dirsearch<\/code>\u626b\u63cf\u3002\u53ef\u4ee5\u770b\u5230\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936615.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936615.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123110853170\" style=\"zoom: 67%;\" \/><\/div><\/p>\n<p>\uff1f\uff1f\uff1f\uff1fwhat<\/p>\n<p>\u4e0d\u77e5\u9053\u662f\u7f51\u4e0a\u7684wp\u662f\u600e\u4e48\u626b\u51fa\u6765\u7684\uff0c\u603b\u4e4b\u626b\u51fa\u6765\u4e86\u5c31\u7167\u7740\u4e0a\u9762\u7684\u505a\u3002\uff08\u731c\u6d4b\u53ef\u80fd\u662f\u88abctfhub\u7981\u6389\u4e86\uff09<\/p>\n<h3>vim\u7f13\u5b58<\/h3>\n<h4>\u9898\u76ee\u80cc\u666f<\/h4>\n<blockquote>\n<p>\u5f53vim\u5f02\u5e38\u9000\u51fa\u65f6\uff0c\u90fd\u4f1a\u751f\u6210\u4e00\u4e2a\u7528\u4e8e\u5907\u4efd\u7f13\u51b2\u533a\u5185\u5bb9\u7684swp\u4e34\u65f6\u6587\u4ef6\uff0c\u6765\u8bb0\u5f55\u4e86\u7528\u6237\u5728\u975e\u6b63\u5e38\u5173\u95edvim\u7f16\u8f91\u5668\u4e4b\u524d\u672a\u80fd\u53ca\u65f6\u4fdd\u5b58\u7684\u4fee\u6539\uff0c\u7528\u4e8e\u6587\u4ef6\u6062\u590d\u3002<\/p>\n<\/blockquote>\n<ul>\n<li>\n<p>\u7b2c\u4e00\u6b21\u4ea7\u751f\u7684\u4ea4\u6362\u6587\u4ef6\u540d\u4e3a .index.php.swp<\/p>\n<\/li>\n<li>\n<p>\u518d\u6b21\u610f\u5916\u9000\u51fa\u540e\uff0c\u5c06\u4f1a\u4ea7\u751f\u540d\u4e3a .index.php.swo \u7684\u4ea4\u6362\u6587\u4ef6<\/p>\n<\/li>\n<li>\n<p>\u7b2c\u4e09\u6b21\u4ea7\u751f\u7684\u4ea4\u6362\u6587\u4ef6\u5219\u4e3a .index.php.swn<\/p>\n<\/li>\n<\/ul>\n<p>\u548cbak\u6587\u4ef6\u9898\u4e00\u6837\uff0c\u4f7f\u7528curl\u547d\u4ee4\u83b7\u53d6index.php.swp\u6587\u4ef6\uff0c\u5f97\u5230flag<\/p>\n<h4>\u9898\u89e3\u4e00:<\/h4>\n<p>\u6253\u5f00\u73af\u5883\uff0c\u53ef\u4ee5\u770b\u5230\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936616.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936616.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123113142901\" style=\"zoom:50%;\" \/><\/div><\/p>\n<p>\u63d0\u793a\u662fvim\u7f13\u5b58\u6f0f\u6d1e\uff0c\u53ef\u4ee5\u5c1d\u8bd5\u8bbf\u95ee.\/index.php.swp\uff0c\u5f97\u5230\u6587\u4ef6\u3002<\/p>\n<p>\u518d\u4f7f\u7528<code>vim -r<\/code>\u6062\u590d\u6587\u4ef6\u3002<\/p>\n<pre><code class=\"language-bash\">vim -r index.php.swp<\/code><\/pre>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936617.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936617.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123113656754\" style=\"zoom: 67%;\" \/><\/div><\/p>\n<p>\u5f97\u5230flag\uff01<\/p>\n<h4>\u9898\u89e3\u4e8c\uff1a<\/h4>\n<p>\u5c1d\u8bd5\u8fd0\u884c\u4e0b\u5217\u547d\u4ee4\uff1a<\/p>\n<pre><code class=\"language-bash\">curl http:\/\/challenge-219f0974df40800e.sandbox.ctfhub.com:10800\/.index.php.swp<\/code><\/pre>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936618.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936618.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123114059947\" style=\"zoom:50%;\" \/><\/div><\/p>\n<p>\u6309\u7167\u63d0\u793a\u8f93\u5165<code>--output -<\/code><\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936619.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936619.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123114144382\" \/><\/div><\/p>\n<p>\u540c\u6837\u53ef\u4ee5\u5f97\u5230flag\uff01<\/p>\n<h3>.DS_Store<\/h3>\n<h4>\u80cc\u666f<\/h4>\n<blockquote>\n<p>.DS_Store \u662f Mac OS \u4fdd\u5b58\u6587\u4ef6\u5939\u7684\u81ea\u5b9a\u4e49\u5c5e\u6027\u7684\u9690\u85cf\u6587\u4ef6\u3002\u901a\u8fc7.DS_Store\u53ef\u4ee5\u77e5\u9053\u8fd9\u4e2a\u76ee\u5f55\u91cc\u9762\u6240\u6709\u6587\u4ef6\u7684\u6e05\u5355\u3002<\/p>\n<\/blockquote>\n<h4>\u9898\u89e3\u4e00\uff1a<\/h4>\n<p>\u8bd5\u7740\u626b\u63cf\u4e00\u4e0b\uff01(\u6ca1\u6709\u626b\u63cf\u6210\u529f\u8fc7\uff0c\u4e0d\u77e5\u9053\u4e3a\u5565\uff0c\u53ef\u80fd\u662fctfhub\u6539\u4e86\u4ee5\u540e\u4e0d\u8ba9\u626b\uff01)<\/p>\n<p>\u7528<code>Python-dsstore<\/code>\u6253\u5f00\u6587\u4ef6<code>DS_Store<\/code><\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936620.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936620.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123121840292\" style=\"zoom: 67%;\" \/><\/div><\/p>\n<p>\u5728\u6d4f\u89c8\u5668\u8bbf\u95ee\u5373\u53ef\u5f97\u5230flag:<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936621.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936621.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123122030155\" style=\"zoom:50%;\" \/><\/div><\/p>\n<h4>\u9898\u89e3\u4e8c\uff1a<\/h4>\n<p>\u4e0b\u8f7d\u5f97\u5230\u7684\u6587\u4ef6\u6253\u5f00\u53d1\u73b0\u662f\u4e00\u4e2a\u4e8c\u8fdb\u5236\u6587\u4ef6\uff0c\u7f16\u8bd1\u5f97\u5230\u5b57\u7b26\u4e32\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936622.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936622.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123141608172\" style=\"zoom:33%;\" \/><\/div><\/p>\n<p>\u7136\u540e\u548c\u4e0a\u9762\u4e00\u6837\u5c31\u884c\u3002<\/p>\n<h4>\u9898\u89e3\u4e09\uff1a<\/h4>\n<p>\u4f7f\u7528<code>ds_store_exp<\/code>\u811a\u672c\u6765\u8bfb\u53d6DS_Store\u6587\u4ef6\u4e5f\u53ef\u4ee5\u5f97\u5230flag\uff01<\/p>\n<pre><code class=\"language-bash\">Usage: python ds_store_exp.py http:\/\/www.example.com\/.DS_Store<\/code><\/pre>\n<p>\u6211\u8fd9\u8fb9\u7528\u7684\u662f<code>win_server2012<\/code>\uff0c\u8fd0\u884c\u811a\u672c\u5f97\u5230\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936623.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936623.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123140726948\" style=\"zoom: 67%;\" \/><\/div><\/p>\n<p>\u8fdb\u5165\u76ee\u5f55\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936624.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936624.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123141340650\" style=\"zoom:50%;\" \/><\/div><br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936625.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936625.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123141354423\" style=\"zoom:50%;\" \/><\/div><br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936626.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936626.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123141419286\" style=\"zoom:50%;\" \/><\/div><br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936627.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936627.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123122833721\" style=\"zoom:50%;\" \/><\/div><\/p>\n<h2>Git\u6cc4\u9732<\/h2>\n<h3>Log<\/h3>\n<h4>\u80cc\u666f<\/h4>\n<blockquote>\n<p>\u5f53\u524d\u5927\u91cf\u5f00\u53d1\u4eba\u5458\u4f7f\u7528git\u8fdb\u884c\u7248\u672c\u63a7\u5236\uff0c\u5bf9\u7ad9\u70b9\u81ea\u52a8\u90e8\u7f72\u3002\u5982\u679c\u914d\u7f6e\u4e0d\u5f53,\u53ef\u80fd\u4f1a\u5c06.git\u6587\u4ef6\u5939\u76f4\u63a5\u90e8\u7f72\u5230\u7ebf\u4e0a\u73af\u5883\u3002\u8fd9\u5c31\u5f15\u8d77\u4e86git\u6cc4\u9732\u6f0f\u6d1e\u3002\u8bf7\u5c1d\u8bd5\u4f7f\u7528BugScanTeam\u7684GitHack\u5b8c\u6210\u672c\u9898<\/p>\n<\/blockquote>\n<h4>\u9898\u89e3\uff1a<\/h4>\n<p>\u9996\u5148\u8fdb\u5165\u73af\u5883\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936628.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936628.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123143532698\" style=\"zoom:50%;\" \/><\/div><\/p>\n<p>\u6309\u7167\u9898\u76ee\u63cf\u8ff0\u7684\u662f\u4e00\u4e2a<code>git\u6cc4\u9732<\/code>\uff0c\u5229\u7528<code>githack<\/code>\u8fdb\u884c\u8fdb\u884c\u6587\u4ef6\u6062\u590d\u3002<\/p>\n<p>\u6211\u5c1d\u8bd5\u4e86<code>BugScanTeam\u7684GitHack<\/code>\u4f46\u662f\u4e00\u76f4\u62a5\u9519\uff0c\u53ef\u80fd\u662f\u6ca1\u6709\u7ef4\u62a4\u7684\u539f\u56e0\uff1f<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936629.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936629.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123161830538\" style=\"zoom: 50%;\" \/><\/div><\/p>\n<blockquote>\n<p>\u8865\u5145\uff1a<\/p>\n<p>\u8fd9\u4e2a\u811a\u672c\u6ca1\u6709\u9519\u662f\u6211\u7684\u4f7f\u7528\u65b9\u5f0f\u6709\u9519\uff0c\u8fd9\u4e2a\u811a\u672c\u517c\u5bb9\u7684\u662f<code>python2<\/code>\u7684\u73af\u5883\uff0c\u6240\u4ee5\u6539\u7528\u6210<code>python2 GitHack.py xxx<\/code>\u5373\u53ef\u3002<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936630.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936630.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123195011449\" style=\"zoom:50%;\" \/><\/div>\n<\/p><\/blockquote>\n<p>\u6240\u4ee5\u6539\u7528<a href=\"https:\/\/github.com\/lijiejie\">lijiejie<\/a>\/<strong><a href=\"https:\/\/github.com\/lijiejie\/GitHack\">GitHack<\/a><\/strong>\uff0c\u4f7f\u7528\u547d\u4ee4<code>GitHack.py http:\/\/challenge-35c195fe89d8f778.sandbox.ctfhub.com:10800\/.git\/ <\/code>\u8fdb\u884c\u626b\u63cf\uff0c\u7ed3\u679c\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936631.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936631.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123152813867\" style=\"zoom: 50%;\" \/><\/div><\/p>\n<p>\u6211\u4ee5\u4e3a\u597d\u4e86\uff0c\u6253\u5f00\u6587\u4ef6\u4e00\u770b\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936632.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936632.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123162240532\" style=\"zoom:33%;\" \/><\/div><\/p>\n<p>\u9ebb\u4e86\uff01<\/p>\n<p>\u4f7f\u7528<code>scrabble<\/code>\u5de5\u5177\u8fdb\u884c\u64cd\u4f5c<\/p>\n<pre><code class=\"language-bash\">.\/scrabble http:\/\/challenge-d11e15df0759ddba.sandbox.ctfhub.com:10800\/<\/code><\/pre>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936633.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936633.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123161123294\" style=\"zoom: 33%;\" \/><\/div><\/p>\n<p>\u4f7f\u7528<code>git log<\/code>\u547d\u4ee4\u67e5\u8be2\u5386\u53f2\u8bb0\u5f55\uff0c\u5f53\u524d\u7248\u672c\u4e3aremove flag\uff0c\u4e8e\u662f\u4f7f\u7528<code>git reset<\/code>\u547d\u4ee4\u8fdb\u884c\u7248\u672c\u5207\u6362\uff0c\u5728\u76ee\u5f55\u4e0b\u53d1\u73b0flag\u6587\u4ef6\u5f97\u5230flag\u3002<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936634.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936634.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123161434737\" style=\"zoom: 50%;\" \/><\/div><\/p>\n<p>\u987a\u5229\u89e3\u51b3\u5f97\u5230flag\uff0c\u611f\u8c22\u300a\u4ece0\u52301\uff1actfer\u6210\u957f\u4e4b\u8def\u300b\u7684\u63a8\u8350\uff01<\/p>\n<h3>Stash<\/h3>\n<h4>\u80cc\u666f<\/h4>\n<blockquote>\n<p>stash\u53ef\u4ee5\u628a\u5f53\u524d\u5de5\u4f5c\u73b0\u573a\u201c\u4fdd\u5b58\u201d\u8d77\u6765\uff0c\u7b49\u4ee5\u540e\u6062\u590d\u73b0\u573a\u540e\u7ee7\u7eed\u5de5\u4f5c\u3002 <\/p>\n<pre><code class=\"language-text\">git stash list \u67e5\u770b\u4fdd\u5b58\u7684\u5de5\u4f5c\u73b0\u573a\u5217\u8868    \ngit stash pop \u6062\u590d\u5de5\u4f5c\u73b0\u573a    \ngit stash show \u663e\u793a\u505a\u4e86\u54ea\u4e9b\u6539\u52a8  \ngit stash show -p \u663e\u793a\u7b2c\u4e00\u4e2a\u4fdd\u5b58\u7684\u5de5\u4f5c\u73b0\u573a\u7684\u6539\u52a8 <\/code><\/pre>\n<\/blockquote>\n<h4>\u9898\u89e3<\/h4>\n<p>\u9996\u5148\u6253\u5f00\u73af\u5883\uff0c\u8fd8\u662f\u8001\u6837\u5b50<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936635.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936635.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123195850221\" style=\"zoom:50%;\" \/><\/div><\/p>\n<p>\u5148\u7528<code>GitHack<\/code>\u626b\u63cf\u6062\u590d\u4e00\u4e0b<\/p>\n<pre><code class=\"language-bash\">python2 GitHack.py http:\/\/challenge-40545d1d900ad6a1.sandbox.ctfhub.com:10800\/.git\/<\/code><\/pre>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936636.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936636.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123200312807\" style=\"zoom: 50%;\" \/><\/div><\/p>\n<p>\u6765\u5230\u76ee\u5f55\u91cc\u7684<code>dist<\/code>\u76ee\u5f55\uff0c\u91cc\u9762\u6709\u626b\u63cf\u51fa\u6765\u7684\u7ed3\u679c\uff0c\u5728\u7ec8\u7aef\u5185\u6253\u5f00\u6062\u590d\u3002<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936637.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936637.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123200357423\" style=\"zoom:33%;\" \/><\/div><\/p>\n<ul>\n<li>\u6839\u636e\u9898\u76ee\u7684\u63d0\u793a\uff0c\u4f7f\u7528<code>git stash list<\/code>\u547d\u4ee4\u67e5\u770b\u4fdd\u5b58\u7684\u5de5\u4f5c\u5217\u8868\uff0c\u53d1\u73b0\u6709\u4e00\u4e2a<code>stash@{0}<\/code>\u7684\u6539\u52a8\u3002<\/li>\n<li>\u4f7f\u7528<code>git stash pop<\/code>\u547d\u4ee4\u6062\u590d\u5de5\u4f5c\u73b0\u573a\uff0c\u5728\u76ee\u5f55\u4e0b\u7ed9\u51fa\u6709flag\u7684txt\u6587\u4ef6\uff0c\u5f97\u5230flag\u3002<\/li>\n<li>\u4f7f\u7528<code>git stash show -p<\/code>\u547d\u4ee4\u663e\u793a\u7b2c\u4e00\u4e2a\u4fdd\u5b58\u7684\u5de5\u4f5c\u73b0\u573a\u7684\u6539\u52a8\uff0c\u5f97\u5230flag\u3002\uff08<code>cat 7737280804297.txt<\/code>\u4e5f\u53ef\u4ee5\uff09<\/li>\n<\/ul>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936638.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936638.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123200805204\" style=\"zoom: 50%;\" \/><\/div><\/p>\n<h3>Index<\/h3>\n<h4>\u80cc\u666f<\/h4>\n<blockquote>\n<p>\u5f53\u524d\u5927\u91cf\u5f00\u53d1\u4eba\u5458\u4f7f\u7528git\u8fdb\u884c\u7248\u672c\u63a7\u5236\uff0c\u5bf9\u7ad9\u70b9\u81ea\u52a8\u90e8\u7f72\u3002\u5982\u679c\u914d\u7f6e\u4e0d\u5f53,\u53ef\u80fd\u4f1a\u5c06.git\u6587\u4ef6\u5939\u76f4\u63a5\u90e8\u7f72\u5230\u7ebf\u4e0a\u73af\u5883\u3002\u8fd9\u5c31\u5f15\u8d77\u4e86git\u6cc4\u9732\u6f0f\u6d1e\u3002<\/p>\n<\/blockquote>\n<h4>\u9898\u89e3<\/h4>\n<p>\u7528<code>GitHack<\/code>\u8fdb\u884c\u6062\u590d\uff0c\u76f4\u63a5\u53ef\u4ee5\u53d1\u73b0\u6587\u4ef6\u4e0b\u7684<code>flag<\/code>:<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936639.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936639.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123202614661\" style=\"zoom:50%;\" \/><\/div><br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936640.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936640.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123202553013\" style=\"zoom:50%;\" \/><\/div><br \/>\n<div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936641.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936641.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123202517036\" style=\"zoom:50%;\" \/><\/div><\/p>\n<h2>SVN\u6cc4\u9732<\/h2>\n<h3>\u80cc\u666f\uff1a<\/h3>\n<blockquote>\n<p>\u5f53\u5f00\u53d1\u4eba\u5458\u4f7f\u7528 SVN \u8fdb\u884c\u7248\u672c\u63a7\u5236\uff0c\u5bf9\u7ad9\u70b9\u81ea\u52a8\u90e8\u7f72\u3002\u5982\u679c\u914d\u7f6e\u4e0d\u5f53,\u53ef\u80fd\u4f1a\u5c06.svn\u6587\u4ef6\u5939\u76f4\u63a5\u90e8\u7f72\u5230\u7ebf\u4e0a\u73af\u5883\u3002\u8fd9\u5c31\u5f15\u8d77\u4e86 SVN \u6cc4\u9732\u6f0f\u6d1e\u3002<\/p>\n<p><code>SVN\uff08subversion\uff09<\/code>\u662f\u6e90\u4ee3\u7801\u7248\u672c\u7ba1\u7406\u8f6f\u4ef6\uff0c\u9020\u6210SVN\u6e90\u4ee3\u7801\u6f0f\u6d1e\u7684\u4e3b\u8981\u539f\u56e0\u662f\u7ba1\u7406\u5458\u64cd\u4f5c\u4e0d\u89c4\u8303\u3002\u201c\u5728\u4f7f\u7528SVN\u7ba1\u7406\u672c\u5730\u4ee3\u7801\u8fc7\u7a0b\u4e2d\uff0c\u4f1a\u81ea\u52a8\u751f\u6210\u4e00\u4e2a\u540d\u4e3a.svn\u7684\u9690\u85cf\u6587\u4ef6\u5939\uff0c\u5176\u4e2d\u5305\u542b\u91cd\u8981\u7684\u6e90\u4ee3\u7801\u4fe1\u606f\u3002\u4f46\u4e00\u4e9b\u7f51\u7ad9\u7ba1\u7406\u5458\u5728\u53d1\u5e03\u4ee3\u7801\u65f6\uff0c\u4e0d\u613f\u610f\u4f7f\u7528\u2018\u5bfc\u51fa\u2019\u529f\u80fd\uff0c\u800c\u662f\u76f4\u63a5\u590d\u5236\u4ee3\u7801\u6587\u4ef6\u5939\u5230WEB\u670d\u52a1\u5668\u4e0a\uff0c\u8fd9\u5c31\u4f7f.svn\u9690\u85cf\u6587\u4ef6\u5939\u88ab\u66b4\u9732\u4e8e\u5916\u7f51\u73af\u5883\uff0c\u9ed1\u5ba2\u53ef\u4ee5\u501f\u52a9\u5176\u4e2d\u5305\u542b\u7684\u7528\u4e8e\u7248\u672c\u4fe1\u606f\u8ffd\u8e2a\u7684\u2018entries\u2019\u6587\u4ef6\uff0c\u9010\u6b65\u6478\u6e05\u7ad9\u70b9\u7ed3\u6784\u3002\u201d\uff08\u53ef\u4ee5\u5229\u7528<code>.svn\/entries<\/code>\u6587\u4ef6\uff0c\u83b7\u53d6\u5230\u670d\u52a1\u5668\u6e90\u7801\u3001svn\u670d\u52a1\u5668\u8d26\u53f7\u5bc6\u7801\u7b49\u4fe1\u606f\uff09<\/p>\n<p>SVN\u4ea7\u751f\u7684.svn\u76ee\u5f55\u4e0b\u8fd8\u5305\u542b\u4e86\u4ee5.svn-base\u7ed3\u5c3e\u7684\u6e90\u4ee3\u7801\u6587\u4ef6\u526f\u672c\uff08\u4f4e\u7248\u672cSVN\u5177\u4f53\u8def\u5f84\u4e3atext-base\u76ee\u5f55\uff0c\u9ad8\u7248\u672cSVN\u4e3apristine\u76ee\u5f55\uff09\uff0c\u5982\u679c\u670d\u52a1\u5668\u6ca1\u6709\u5bf9\u6b64\u7c7b\u540e\u7f00\u505a\u89e3\u6790\uff0c\u9ed1\u5ba2\u5219\u53ef\u4ee5\u76f4\u63a5\u83b7\u5f97\u6587\u4ef6\u6e90\u4ee3\u7801\u3002<\/p>\n<\/blockquote>\n<h3>\u9898\u89e3\uff1a<\/h3>\n<p>\u6253\u5f00\u73af\u5883:<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936642.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936642.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123202928741\" style=\"zoom:50%;\" \/><\/div><\/p>\n<blockquote>\n<p>svn1.6\u53ca\u4ee5\u524d\u7248\u672c\u4f1a\u5728\u9879\u76ee\u7684\u6bcf\u4e2a\u6587\u4ef6\u5939\u4e0b\u90fd\u751f\u6210\u4e00\u4e2a<code>.svn<\/code>\u6587\u4ef6\u5939\uff0c\u91cc\u9762\u5305\u542b\u4e86\u6240\u6709\u6587\u4ef6\u7684\u5907\u4efd\uff0c\u6587\u4ef6\u540d\u4e3a<code>.svn\/text-base\/\u6587\u4ef6\u540d.svn-base<\/code>\u3002<\/p>\n<p>svn1.7\u53ca\u4ee5\u540e\u7248\u672c\u5219\u53ea\u5728\u9879\u76ee\u6839\u76ee\u5f55\u751f\u6210\u4e00\u4e2a<code>.svn<\/code>\u6587\u4ef6\u5939\uff0c\u91cc\u9762\u7684<code>pristine<\/code>\u6587\u4ef6\u5939\u91cc\u5305\u542b\u4e86\u6574\u4e2a\u9879\u76ee\u7684\u6240\u6709\u6587\u4ef6\u5907\u4efd\u3002  <\/p>\n<\/blockquote>\n<p>\u5b89\u88c5<code>dvcs-ripper<\/code><\/p>\n<pre><code class=\"language-bash\">git clone https:\/\/github.com\/kost\/dvcs-ripper<\/code><\/pre>\n<p>\u5b89\u88c5\u9700\u8981\u7684<code>perl<\/code>\u6a21\u5757<\/p>\n<pre><code class=\"language-bash\">sudo apt-get install perl libio-socket-ssl-perl libdbd-sqlite3-perl libclass-dbi-perl libio-all-lwp-perl<\/code><\/pre>\n<p>\u83b7\u53d6<code>SVN<\/code><\/p>\n<pre><code class=\"language-bash\">perl rip-svn.pl -v -u http:\/\/www.example.com\/.svn\/<\/code><\/pre>\n<p>\u4f7f\u7528<code>dvcs-ripper<\/code>\u83b7\u53d6<code>SVN<\/code>\u6587\u4ef6\u5939<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936643.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936643.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123204303028\" style=\"zoom:50%;\" \/><\/div><\/p>\n<p>\u8fdb\u5165<code>.svn<\/code>\u6587\u4ef6\uff0c\u7531\u4e8eSVN\u4e2d\u7684pristine\u6587\u4ef6\u5939\u91cc\u5305\u542b\u4e86\u6574\u4e2a\u9879\u76ee\u7684\u6240\u6709\u6587\u4ef6\u5907\u4efd\uff0c\u91cc\u9762\u7684\u6587\u4ef6\u5f88\u5c11\uff0c\u6253\u5f00\u6587\u4ef6\u68c0\u67e5\uff0c\u5f88\u5bb9\u6613\u5728\u7b2c\u4e00\u4e2a\u6587\u4ef6\u4e2d\u627e\u5230<code>flag<\/code>\u6587\u4ef6\u3002<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936644.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936644.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123204921676\" style=\"zoom: 50%;\" \/><\/div><\/p>\n<p>\u9664\u4e86\u4e00\u4e2a\u4e00\u4e2a\u70b9\uff0c\u5728\u547d\u4ee4\u884c\u8fdb\u884c\u67e5\u627e\u4e5f\u662f\u53ef\u884c\u7684\uff0c\u5982\u4e0b\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936645.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936645.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123210012593\" style=\"zoom: 50%;\" \/><\/div><\/p>\n<h2>HG\u6cc4\u9732<\/h2>\n<h3>\u80cc\u666f<\/h3>\n<blockquote>\n<p>\u5f53\u5f00\u53d1\u4eba\u5458\u4f7f\u7528 Mercurial \u8fdb\u884c\u7248\u672c\u63a7\u5236\uff0c\u5bf9\u7ad9\u70b9\u81ea\u52a8\u90e8\u7f72\u3002\u5982\u679c\u914d\u7f6e\u4e0d\u5f53,\u53ef\u80fd\u4f1a\u5c06.hg \u6587\u4ef6\u5939\u76f4\u63a5\u90e8\u7f72\u5230\u7ebf\u4e0a\u73af\u5883\u3002\u8fd9\u5c31\u5f15\u8d77\u4e86 hg \u6cc4\u9732\u6f0f\u6d1e\u3002<\/p>\n<\/blockquote>\n<h3>\u9898\u89e3<\/h3>\n<p>\u6253\u5f00\u73af\u5883\u770b\u5230\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936646.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936646.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123212831549\" style=\"zoom:50%;\" \/><\/div><\/p>\n<p>\u5df2\u77e5\u662f<code>.hg\u6cc4\u9732<\/code>\uff0c\u5219\u8fd0\u884c\u4e0b\u5217\u547d\u4ee4\uff1a<\/p>\n<pre><code class=\"language-bash\">sudo perl rip-hg.pl -v -u http:\/\/challenge-5bd46808b5fa4ab3.sandbox.ctfhub.com:10800\/.hg\/<\/code><\/pre>\n<p>==-v \u5e94\u8be5\u662f\u663e\u793a\u8be6\u7ec6\u7684\u9009\u9879\uff0c\u6700\u597d\u987a\u5e26\u5199\u4e0a==<\/p>\n<p>\u7136\u540e\uff1a<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936647.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936647.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123214031260\" style=\"zoom:50%;\" \/><\/div><\/p>\n<p>==\u6267\u884c\u8fc7\u7a0b\u6709\u5927\u91cf\u6587\u4ef6\u672a\u627e\u5230\uff0c\u67e5\u770b\u5df2\u65e6\u62ff\u5230\u6587\u4ef6\uff0c\u8fdb\u4e00\u6b65\u8bbf\u95eetxt\u6587\u4ef6==<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936648.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936648.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123214145110\" style=\"zoom:50%;\" \/><\/div><\/p>\n<p>\u5f97\u5230<code>flag<\/code>!!!!<\/p>\n<p><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936649.png'><img class=\"lazyload lazyload-style-2\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  decoding=\"async\" data-original=\"https:\/\/pic-for-be.oss-cn-hangzhou.aliyuncs.com\/img\/202205161936649.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"image-20220123214336004\" \/><\/div><\/p>\n","protected":false},"excerpt":{"rendered":"<p>ctfhub\u4fe1\u606f\u6cc4\u9732 \u76ee\u5f55\u904d\u5386 \u9898\u76ee\u80cc\u666f \u76ee\u5f55\u904d\u5386\u662fweb\u4e2d\u5e38\u89c1\u7684\u57fa\u7840\u64cd\u4f5c\uff0c\u6211\u4eec\u901a\u5e38\u4f1a\u901a\u8fc7\u76ee\u5f55\u7684\u904d\u5386\u6765\u53d1\u73b0\u662f\u5426 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":108,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[11,18],"tags":[],"class_list":["post-104","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-ctf-and-protest","category-web"],"_links":{"self":[{"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/posts\/104","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/comments?post=104"}],"version-history":[{"count":3,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/posts\/104\/revisions"}],"predecessor-version":[{"id":291,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/posts\/104\/revisions\/291"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/media\/108"}],"wp:attachment":[{"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/media?parent=104"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/categories?post=104"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/162.14.82.114\/index.php\/wp-json\/wp\/v2\/tags?post=104"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}