BugkuCTF webbase $_GET

foreword

After writing the web questions for so long, it is considered to have finished all the basic parts of it. The next few days will continue to update the solutions of the BugkuCTF WEB part. In order not to affect the reading, the solutions of each question are in the form of a separate article. Published, thank you for your continued support and understanding, and encouragement~~~

Click on the link and you will know that it is a question of code auditing, but this question is relatively simple, let's take a look at this code together

$what=$_GET['what'];
echo $what;
if($what=='flag')
echo 'flag{****}';

It means that a parameter what is passed in. When the value of what is equal to flag, the flag will be printed out.

We just construct ?what=flag directly

Then the flag value exploded directly