[s] Misc-flag
FLAG{This is flag's format}
Misc-corgi can fly
stegsolve.jar
Misc-television
HxD打开即得
Misc-meow
Misc-where is flag
RegExFLAG{w+}
Misc-encoder
Misc-slow
Misc-pusheen.txt
Misc-big
HxD查看文件头,是7z
Misc-otaku
Misc-buzzing
Web-hide and seek
右键源码
Web-guestbook
Web-LFI
本地文件包含
Web-homepage
console,Opera 56.0.3051.36无法看到二维码,用Firefox
Web-ping
Web-scoreboard
Web-login as admin 0
过滤函数
function safe_filter($str)
{
$strl = strtolower($str);
if (strstr($strl, 'or 1=1') || strstr($strl, 'drop') ||
strstr($strl, 'update') || strstr($strl, 'delete')
) {
return '';
}
return str_replace("'", "\'", $str);
}
转义了'
却没有转义转义字符
构造name=' or 1#&password=1
再使用limit
来返回指定的记录数
近期评论