Panda - 专注于网络空间安全研究 - www.cnpanda.net

0x01 起因Day 1 - Wish ListCan you spot the vulnerability?class Challenge { const UPLOAD_DIRECTORY = './solutions/'; private $file; private $whitelist; public function __construct($file) { ...

0x01 起因最近在看PHP SECURITY CALENDAR 2017的题目，这是第二题Day 2 - TwigCan you spot the vulnerability?// composer require "twig/twig"require 'vendor/autoload.php';class Template { private $twig; public...