PHP - register globals

It seems that the developper often leaves backup files around...

似乎开发人员经常把备份文件放在…

直接下载网站备份:

index.php.bak

源码中的这一部分:

 满足红色部分的条件即可打印出隐藏密码----------payload:(此处过滤了  ""     去掉即可) 

http://challenge01.root-me.org/web-serveur/ch17/?_SESSION[logged]=1

 备份源码:

猜你喜欢

转载自www.cnblogs.com/abbin-blog/p/12079208.html