{"id":1179,"date":"2025-01-18T23:25:51","date_gmt":"2025-01-18T15:25:51","guid":{"rendered":"http:\/\/gzxingyu.cloud\/?p=1179"},"modified":"2025-01-18T23:25:52","modified_gmt":"2025-01-18T15:25:52","slug":"swpuctf-2021%e6%96%b0%e7%94%9f%e8%b5%9bjicao","status":"publish","type":"post","link":"http:\/\/gzxingyu.cloud\/index.php\/2025\/01\/18\/swpuctf-2021%e6%96%b0%e7%94%9f%e8%b5%9bjicao\/","title":{"rendered":"SWPUCTF 2021\u65b0\u751f\u8d5bjicao"},"content":{"rendered":"<p><img decoding=\"async\" src=\"http:\/\/gzxingyu.cloud\/wp-content\/uploads\/2025\/01\/Pasted-image-20241105200514.png\" alt=\"Pasted image 20241105200514.png\"><\/p>\n<p>\u5206\u6790 POST\u4f20\u5165id  == wllmNB\u540c\u65f6GET json [&#8216;x&#8217;] == &quot;wllm&quot;,flag\u5c31\u4f1a\u51fa\u73b0\u3002<\/p>\n<p>json_decode\u63a5\u53d7\u4e00\u4e2a==JSON==\u683c\u5f0f\u7684==\u5b57\u7b26\u4e32==\u5e76\u4e14\u628a\u5b83\u8f6c\u6362\u4e3aPHP\u53d8\u91cf ,\u5f53\u8be5\u53c2\u6570$assoc\u4e3aTRUE\u65f6\uff0c\u5c06\u8fd4\u56dearray\uff0c\u5426\u5219\u8fd4\u56deobject\u3002<\/p>\n<p>JSON\u683c\u5f0f\u7684\u5b57\u7b26\u4e32<\/p>\n<p>$json = \u2018{\u201ca\u201d:\u201cphp\u201d,\u201cb\u201d:\u201cmysql\u201d,\u201cc\u201d:3}\u2019;<\/p>\n<p>\u5176\u4e2da\u4e3a\u952e\uff0cphp\u4e3aa\u7684\u952e\u503c\u3002<\/p>\n<p>GET\uff1a[http:\/\/node7.anna.nssctf.cn:24335\/?json={&quot;x&quot;:&quot;wllm&quot;}](http:\/\/node7.anna.nssctf.cn:24335\/?json=%7B%22x%22:%22wllm%22%7D &quot;http:\/\/node7.anna.nssctf.cn:24335\/?json={&quot;x&quot;:&quot;wllm&quot;}&quot;)<br \/>\nPOST\uff1aid=wllmNB<\/p>\n<p><img decoding=\"async\" src=\"http:\/\/gzxingyu.cloud\/wp-content\/uploads\/2025\/01\/Pasted-image-20241105200732.png\" alt=\"Pasted image 20241105200732.png\"><\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u5206\u6790 POST\u4f20\u5165id == wllmNB\u540c\u65f6GET json [&#8216;x&#8217;] == &#038;q [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8,22,23],"tags":[31,26,30],"class_list":["post-1179","post","type-post","status-publish","format-standard","hentry","category-ctf","category-ctf-web","category-nssctf","tag-php","tag-rce","tag-30"],"_links":{"self":[{"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/posts\/1179","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/comments?post=1179"}],"version-history":[{"count":1,"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/posts\/1179\/revisions"}],"predecessor-version":[{"id":1180,"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/posts\/1179\/revisions\/1180"}],"wp:attachment":[{"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/media?parent=1179"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/categories?post=1179"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/tags?post=1179"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}