{"id":39,"date":"2022-05-13T14:56:40","date_gmt":"2022-05-13T06:56:40","guid":{"rendered":"http:\/\/162.14.82.114\/?p=39"},"modified":"2022-05-16T21:15:25","modified_gmt":"2022-05-16T13:15:25","slug":"%e6%94%bb%e9%98%b2%e4%b8%96%e7%95%8c%e6%96%b0%e6%89%8b%e4%b8%93%e5%8c%ba-web","status":"publish","type":"post","link":"http:\/\/162.14.82.114\/index.php\/39\/05\/13\/2022\/","title":{"rendered":"\u653b\u9632\u4e16\u754c\u65b0\u624b\u4e13\u533a\u2014\u2014WEB"},"content":{"rendered":"

001 view_source<\/h1>\n

\"image-20220125193519294\"<\/div>
\n
\"image-20220125193656769\"<\/div><\/p>\n

\u60f3\u67e5\u770b\u7f51\u9875\u6e90\u4ee3\u7801\uff0c\u9664\u4e86\u53f3\u952e\uff0cF12<\/code>\u548cctrl+shift+i<\/code>\u4e5f\u53ef\u4ee5\u505a\u5230\uff0cF12\u4ee5\u540e\u5c31\u53ef\u4ee5\u770b\u5230flag\u4e86\u3002<\/p>\n

\"image-20220125193719553\"<\/div><\/p>\n
 cyberpeace{f5a24e9c446e08fe433f0f933b56b01e} <\/code><\/pre>\n
\u6216\u8005\u6309\u4e0bctrl+u<\/code><\/strong>\u4e5f\u53ef\u67e5\u770b\u7f51\u9875\u6e90\u4ee3\u7801<\/p>\n
\"image-20220125194027128\"<\/div><\/p>\n
\u9664\u6b64\u4e4b\u5916\uff0c\u53ef\u4ee5 google \u4e00\u4e0bview_source<\/code>\uff0c\u53ef\u4ee5\u770b\u5230\uff1a<\/p>\n
\"image-20220125194450496\"<\/div><\/p>\n
\u4f7f\u7528\u65b9\u6cd5\u4e5f\u5f88\u7b80\u5355\uff1aview-source:http:\/\/111.200.241.244:53301\/ <\/code>\u5373\u53ef\u3002\uff08\u5e76\u975e\u6240\u6709\u7f51\u7ad9\u90fd\u53ef\u4ee5\uff09<\/p>\n
\u8fd9\u91cc\u65e0\u6cd5\u53f3\u952e\u5176\u5b9e\u662f\u56e0\u4e3a\uff0c\u6709\u4e00\u4e2ajs<\/code>\u963b\u6b62\u4e86\u3002\u6211\u4eec\u76f4\u63a5\u7981\u7528javascript\uff0c<\/del>\u501f\u52a9\u63d2\u4ef6\u4e5f\u53ef\u4ee5\u7981\u7528\u3002<\/p>\n
002 robots<\/h1>\n
\"image-20220125195117985\"<\/div><\/p>\n
\u770b\u5230\u9898\u76ee\u5f88\u5bb9\u6613\u60f3\u5230\u548cRobots\u534f\u8bae<\/code>\u6709\u5173\uff0c\u6253\u5f00\u73af\u5883\uff0c\u662f\u4e00\u7247\u7a7a\u767d\uff0c\u4e0d\u8fc7\u4e0d\u5f71\u54cd\u6211\u4eec\u505a\u9898<\/p>\n
\"image-20220125195306579\"<\/div><\/p>\n
\u6211\u4eec\u5728\u7aef\u53e3\u53f7\u540e\u9762\u8ddf\u4e0a\/robots.txt<\/code>\uff0cflag\u6240\u5728\u7684\u6587\u4ef6\u5c31\u51fa\u6765\u4e86\u3002<\/p>\n
\"image-20220125195437388\"<\/div><\/p>\n
\u548c\u4e0a\u9762\u4e00\u6837\u6253\u51fa\u6587\u4ef6\u540d\u5c31\u884c<\/p>\n
\"image-20220125195510361\"<\/div><\/p>\n
\u6216\u8005\u7528curl http:\/\/111.200.241.244:63312\/f1ag_1s_h3re.php<\/code>\u5728\u547d\u4ee4\u884c\u4e0b\u83b7\u5f97\uff1a<\/p>\n
\"image-20220125195807273\"<\/div><\/p>\n
003 backup<\/h1>\n
\"image-20220125195848197\"<\/div><\/p>\n
\u6253\u5f00\u73af\u5883<\/p>\n
\"image-20220125200242335\"<\/div><\/p>\n
\u9898\u76ee\u8bf4\u4e86\uff0c\u8fd9\u662f\u4e00\u4e2aindex.php<\/code>\u7684\u5907\u4efd\u6587\u4ef6\uff0c\u6253\u5f00 kali \uff0c\u62ffdirsearch<\/code>\u626b\u4e00\u4e0b\u5c31\u77e5\u9053\u4e86\u3002\uff08windows\u7aef\u7684\u7528\u5fa1\u5251\u4e5f\u53ef\u4ee5\u626b\u51fa\u6765\uff09<\/p>\n
\"image-20220125201807292\"<\/div><\/p>\n
\u5e38\u89c1\u7684\u5907\u4efd\u6587\u4ef6\u540e\u7f00\u540d\u6709 .git .svn .swp .~ .bak .bash_history<\/code>\u7b49\uff0c\u6328\u4e2a\u8bd5\u4e5f\u53ef\u4ee5\uff0c\u5f97\u5230flag\u3002<\/p>\n

\n
\"image-20220125200416029\"<\/div>
\n
\"image-20220125200340406\"<\/div>
\n<\/center><\/p>\n
004 cookie<\/h1>\n
\"image-20220125201856460\"<\/div><\/p>\n
\u83b7\u53d6\u73af\u5883\u4ee5\u540e\u53ef\u4ee5\u770b\u5230\uff1a<\/p>\n
\"image-20220125201940114\"<\/div><\/p>\n
\u767e\u5ea6\u767e\u79d1\u7684\u89e3\u91ca\u662f\u8fd9\u6837\u7684\uff1a<\/p>\n
\"image-20220125202017334\"<\/div><\/p>\n
\u77e5\u9053 flag \u548c cookie \u6709\u5173\uff0cF12 \u770b\u4e00\u4e0b\u3002<\/p>\n
\"image-20220125202400350\"<\/div><\/p>\n
\u8bbf\u95eehttp:\/\/111.198.29.45:47911\/cookie.php<\/code>\uff0c\u63d0\u793a\u67e5\u770bhttp\u54cd\u5e94\u5305\uff0c\u5728\u7f51\u7edc\u4e00\u680f\uff0c\u53ef\u770b\u5230\u8bbf\u95ee cookie.php \u7684\u6570\u636e\u5305<\/p>\n
\"image-20220125202934756\"<\/div><\/p>\n
\u53ef\u4ee5\u770b\u5230\u518d\u54cd\u5e94\u680f\u91cc\u9762\uff0c\u660e\u76ee\u5f20\u80c6\u7684\u653e\u7740 flag\uff1ahttp:\/\/111.200.241.244:50402\/cookie.php<\/code>\u3002<\/p>\n
\u672c\u9898\u4e5f\u53ef\u4ee5\u4f7f\u7528burpsuite<\/code>\uff0c\u8fdb\u884c\u6293\u5305\u5904\u7406\u3002<\/p>\n
\u540c\u6837\u5728\u547d\u4ee4\u884c\u4e0b\u4e5f\u53ef\u4ee5\u8fdb\u884c\u64cd\u4f5c\uff0c\u540c\u65f6\u5de9\u56fa\u4e00\u4e0b[curl\u7684\u76f8\u5173\u7528\u6cd5](https:\/\/www.jianshu.com\/p\/3f8fbacf753c<\/a> \u4ee5\u53ca http:\/\/aiezu.com\/article\/linux_curl_http_cookie.html<\/a>)<\/p>\n
\"image-20220125210114055\"<\/div> <\/p>\n
005 disabled_button<\/h1>\n
\"image-20220125210203595\"<\/div><\/p>\n
\u6253\u5f00\u73af\u5883<\/p>\n
\"image-20220125210247401\"<\/div><\/p>\n
\u663e\u793a\u4e0d\u80fd\u6309\u7684\u6309\u94ae\uff0c\u6309\u4e00\u4e0b\u8bd5\u8bd5\uff0c\u771f\u7684\u6ca1\u529e\u6cd5\u6309\u4e0b\u53bb\uff0cF12 \u770b\u4e0b\u6e90\u4ee3\u7801<\/p>\n
\"image-20220125210510479\"<\/div><\/p>\n
\u53d1\u73b0input\u6807\u7b7e\u6709\u4e2adisable<\/code>\u5c5e\u6027\uff0c\u628a\u5b83\u5220\u6389\u5c31\u53ef\u4ee5\u6b63\u5e38\u6309\u6309\u94ae\u4e86\uff0c\u6309\u5b8c\u5c31\u6709flag\u4e86<\/p>\n
\"image-20220125210718484\"<\/div><\/p>\n
\u4f46\u662f\u4ee3\u7801\u5ba1\u8ba1\u4ee5\u540e\u53ef\u4ee5\u770b\u51fa\u8fd9\u9053\u9898\u672c\u8d28\u4e0a\u8fd8\u662f\u9700\u8981\u63a5\u6536\u5230\u4e00\u4e2a\u4e3a flag \u7684 post \u8bf7\u6c42\uff0c\u53ef\u4ee5\u5c1d\u8bd5\u7528hackbar<\/code>\u6784\u9020\u4e00\u4e0b\u3002<\/p>\n
\"image-20220125211434886\"<\/div><\/p>\n
\u5f97\u5230flag\u3002<\/p>\n
006 weak_auth<\/h1>\n
\"image-20220125211547219\"<\/div><\/p>\n
\u6253\u5f00\u73af\u5883<\/p>\n
\"image-20220125211758204\"<\/div><\/p>\n
\u968f\u624b\u8bbe\u7684\u5bc6\u7801\uff1fpassword<\/code>\u00d7\uff0c123456<\/code>\u221a  \uff1f\uff1f\uff1f\uff1f\uff1f<\/p>\n
\"image-20220125212049441\"<\/div><\/p>\n
\u884c\u5427\uff0c\u4e0b\u4e00\u9898\u3002<\/del><\/p>\n
\u6211\u4eec\u8fd8\u662f\u4e0d\u53d6\u5de7\u4e86\uff0c\u6bd5\u7adf\u4e0d\u662f\u6bcf\u6b21\u90fd\u80fd\u8fd9\u4e48\u5e78\u8fd0\uff0c\u7528FoxyProxy<\/code>\u63d2\u4ef6\u914d\u5408BurpSuite<\/code>\u6293\u5305\u4e00\u4e0b\uff0c<\/p>\n
\"image-20220125212617397\"<\/div>
\n
\"image-20220125213012090\"<\/div><\/p>\n
\u5fd8\u4e86\u8bf4\uff0c\u653b\u51fb\u6a21\u5f0f\u6539\u6210<\/p>\n
\"image-20220125213736054\"<\/div><\/p>\n
\u5206\u522b\u8bbe\u7f6e\u597d\u5b57\u5178\u4ee5\u540e\u5f00\u59cb\u653b\u51fb\u5c31\u884c\u3002\uff08\u5b57\u5178\u53ef\u4ee5\u4e0agithub\u4e0a\u641c\uff0c\u4e00\u5927\u5806\uff0c\u968f\u4fbf\u627e\u4e00\u4e2a\u5c31\u884c\uff0c\u6bd5\u7adf\u4e0d\u662f\u4ec0\u4e48\u96be\u9898\uff09\u5bfb\u627e\u54cd\u5e94\u957f\u5ea6\u7279\u6b8a\u7684\u5b57\u6bb5\uff0c\u770b\u4e0b\u9762\u90a3\u4e2a\u7279\u6b8a\u7684437<\/code>\uff0c\u5c31\u4e24\u4e2a\uff0c\u4e00\u822c\u6765\u8bf4\u5c31\u4e00\u4e2a\uff0c\u54cd\u5e94\u91cc\u9762\u5c31\u6709flag<\/p>\n
\"image-20220125214350746\"<\/div><\/p>\n
007 simple_php<\/h1>\n
\"image-20220127153713109\"<\/div><\/p>\n
\u6253\u5f00\u73af\u5883\u4ee5\u540e\u53ef\u4ee5\u770b\u5230\uff1a<\/p>\n
\"image-20220127153745807\"<\/div><\/p>\n
\u6253\u5f00\u7f51\u9875\u8fdb\u884c\u4ee3\u7801\u5ba1\u8ba1\uff1a\u53ef\u4ee5\u770b\u5230\u540c\u65f6\u6ee1\u8db3a==0<\/code> \u548ca\u4e3a\u771f<\/code>\u5c31\u4f1a\u663e\u793aflag1\uff0cb\u4e0d\u662f\u6570\u5b57\u4e14>1234<\/code>\u5c31\u4f1a\u8fd4\u56deflag2\uff0c\u8003\u5bdfphp\u5f31\u7c7b\u578b\u3002<\/p>\n
\"image-20220127172805240\"<\/div><\/p>\n
\u67e5\u770b\u4e00\u4e0bphp\u7c7b\u578b\u6bd4\u8f83\u8868<\/a>\uff0c\u53ef\u4ee5\u770b\u5230\uff0c\u5f31\u7c7b\u578b\u4e0b\uff0c"0"<\/code>\u88ab\u8bc6\u522b\u4e3atrue<\/code>\u3002<\/p>\n