{"id":1125,"date":"2025-01-18T23:22:58","date_gmt":"2025-01-18T15:22:58","guid":{"rendered":"http:\/\/gzxingyu.cloud\/?p=1125"},"modified":"2025-01-18T23:22:59","modified_gmt":"2025-01-18T15:22:59","slug":"swpuctf-2021-%e6%96%b0%e7%94%9f%e8%b5%9bez_unserialize","status":"publish","type":"post","link":"http:\/\/gzxingyu.cloud\/index.php\/2025\/01\/18\/swpuctf-2021-%e6%96%b0%e7%94%9f%e8%b5%9bez_unserialize\/","title":{"rendered":"SWPUCTF 2021 \u65b0\u751f\u8d5bez_unserialize"},"content":{"rendered":"

\"Pasted<\/p>\n

\"Pasted<\/p>\n

\u53d1\u73b0disallow\uff0c\u8bf4\u660e\u5e94\u8be5\u548crobots\u6709\u5173\u3002
\n\u5728robots.txt\u6587\u4ef6\u4e2d\uff0c\u201cDisallow\u201d\u6307\u4ee4\u7528\u4e8e\u544a\u8bc9\u641c\u7d22\u5f15\u64ce\u722c\u866b\u4e0d\u8981\u6293\u53d6\u6307\u5b9a\u7684URL\u8def\u5f84\u6216\u76ee\u5f55\uff0c\u4f8b\u5982\u201cDisallow: \/private\/\u201d\u8868\u793a\u4e0d\u6293\u53d6\u7f51\u7ad9\u4e2d\u201cprivate\u201d\u76ee\u5f55\u4e0b\u7684\u9875\u9762\u3002
\n\"Pasted<\/p>\n

\u731c\u6d4brobots.txt\u6587\u4ef6\uff01
\n\u53d1\u73b0php\u6587\u4ef6
\n\"Pasted<\/p>\n

\u8bbf\u95ee\u8be5\u6587\u4ef6
\n

\"Pasted<\/div>
\n\u5206\u6790\u4ee3\u7801\uff0c\u53d1\u73b0\u7528get\u4f20\u5e8f\u5217\u5316\u5b57\u7b26\u4e32\u5e76\u4e14\u53ea\u8981admin\u4e3a\u5b57\u7b26\u4e32admin\u4ee5\u53capasswd\u4e3a\u5b57\u7b26\u4e32ctf\uff0c\u5373\u53ef\u663e\u793aflag
\n\u4ee5\u4e0b\u662fphp\u4ee3\u7801\uff1a
\n<?php
\nclass wllm{
\npublic $admin="admin";
\npublic Extra close brace or missing open brace<\/title>passwd=”ctf”; } <\/text><\/g><\/g><\/g><\/g><\/svg>passwd=”ctf”; } <\/mtext><\/merror><\/math><\/mjx-assistive-mml><\/mjx-container>class=new wllm;
\n<\/g><\/g><\/g><\/g><\/g><\/g><\/g><\/g><\/g><\/g><\/g><\/g><\/g><\/g><\/svg>a<\/mi>=<\/mo>s<\/mi>e<\/mi>r<\/mi>i<\/mi>a<\/mi>l<\/mi>i<\/mi>z<\/mi>e<\/mi>(<\/mo><\/math><\/mjx-assistive-mml><\/mjx-container>class);
\necho $a;
\n?>
\n\u8bbf\u95ee\u83b7\u5f97\u5e8f\u5217\u5316\u5b57\u7b26\u4e32
\n
\"Pasted<\/div>
\n\u4f20\u503c\u5f97\u5230flag
\n\"Pasted<\/p>\n

\u603b\u7ed3<\/h3>\n
    \n
  • php\u5e8f\u5217\u5316
    \n\u4f7f\u7528php\u751f\u6210\u5e8f\u5217\u5316\u5b57\u7b26\u4e32<\/li>\n
  • robots.txt \u722c\u866b\u534f\u8bae\uff0c\u89c4\u5b9a\u54ea\u4e9b\u53ef\u722c\uff0c\u54ea\u4e9b\u4e0d\u53ef\u722c<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"

    \u53d1\u73b0disallow\uff0c\u8bf4\u660e\u5e94\u8be5\u548crobots\u6709\u5173\u3002 \u5728robots.txt\u6587\u4ef6\u4e2d\uff0c\u201cDisallow\u201d\u6307\u4ee4\u7528\u4e8e […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8,22,23],"tags":[37],"class_list":["post-1125","post","type-post","status-publish","format-standard","hentry","category-ctf","category-ctf-web","category-nssctf","tag-37"],"_links":{"self":[{"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/posts\/1125","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/comments?post=1125"}],"version-history":[{"count":1,"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/posts\/1125\/revisions"}],"predecessor-version":[{"id":1126,"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/posts\/1125\/revisions\/1126"}],"wp:attachment":[{"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/media?parent=1125"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/categories?post=1125"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/tags?post=1125"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}