hackme.inndy.tw

[s] Misc-flag

FLAG{This is flag's format}

Misc-corgi can fly

stegsolve.jar

Misc-television

HxD打开即得

Misc-meow

Misc-where is flag

RegExFLAG{w+}

Misc-encoder

Misc-slow

Misc-pusheen.txt

Misc-big

HxD查看文件头，是7z

Misc-otaku

Misc-buzzing

Web-hide and seek

右键源码

Web-guestbook

Web-LFI

本地文件包含

Web-homepage

console，Opera 56.0.3051.36无法看到二维码，用Firefox

Web-ping

Web-scoreboard

Web-login as admin 0

过滤函数

function safe_filter($str)
{
    $strl = strtolower($str);
    if (strstr($strl, 'or 1=1') || strstr($strl, 'drop') ||
        strstr($strl, 'update') || strstr($strl, 'delete')
    ) {
        return '';
    }
    return str_replace("'", "\'", $str);
}

转义了'却没有转义转义字符
构造name=' or 1#&password=1
再使用limit来返回指定的记录数