https://blog.youkuaiyun.com/whatebzh-cnhttps://blog.youkuaiyun.com/https://blog.youkuaiyun.com/whateb/article/details/140275511https://blog.youkuaiyun.com/whateb/article/details/140275511whatebMon, 08 Jul 2024 18:17:42 +0800https://blog.youkuaiyun.com/whateb/article/details/140274336https://blog.youkuaiyun.com/whateb/article/details/140274336whatebMon, 08 Jul 2024 17:50:21 +0800https://blog.youkuaiyun.com/whateb/article/details/140214064https://blog.youkuaiyun.com/whateb/article/details/140214064whatebFri, 05 Jul 2024 18:06:06 +0800https://blog.youkuaiyun.com/whateb/article/details/134386918https://blog.youkuaiyun.com/whateb/article/details/134386918whatebMon, 13 Nov 2023 21:48:13 +0800"source.php","hint"=>"hint.php"];代码分为两个部分，上面是class，下面是一个if判断，如果经过if判断正确后直接进入文件包含漏洞中获取flag。第四个if，对page进行一次url解码并赋给_page，截取_page？判断_page是否在白名单中，因此需传入二次编码后的内容，就可以使checkfile返回true。类中有四个判断，不可以满足第一个，满足后三个中一个即可。]]>https://blog.youkuaiyun.com/whateb/article/details/133246655https://blog.youkuaiyun.com/whateb/article/details/133246655whatebSun, 24 Sep 2023 18:05:05 +0800