bby-blog
http请求
Back to Home
http请求
Created
2026-04-25
|
Updated
2026-05-19
|
web
|
Post Views:
学习链接:
HTTP 请求方法
Author:
bby
Link:
http://example.com/2026/04/25/2026-4-25-http%E8%AF%B7%E6%B1%82/
Copyright Notice:
All articles on this blog are licensed under
CC BY-NC-SA 4.0
unless otherwise stated.
web
ctf
Previous
2026LitCTF-Crypto方向赛题解答
lit_xor_two_story题目123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194~~~`...
Next
PHP相关攻击
PHP的学习链接:PHP 1.基础信息泄露与配置缺陷1.1phpinfo()信息泄露1<?php phpinfo(); ?> 泄露内容: PHP版本号、编译选项 系统环境变量(PATH、USER等) 扩展加载情况(危险扩展如exec、system) 绝对路径(DOCUMENT_ROOT、SCRIPT_FILENAME) Session存储位置、上传临时目录 1.2错误报告泄露123// 危险配置error_reporting(E_ALL);ini_set('display_errors', 'on'); 泄露内容: 绝对路径 数据库报错 表结构 SQL语句片段 2.文件包含漏洞(LFI/RFI)2.1本地文件包含(LFI)漏洞代码: 12$page = $_GET['page'];include($page . '.php'); 攻击载荷: 12345678// 读取系统文件?page=../../../../etc/passwd%00// 读取源码(需要过滤器)?page=php...
Related Articles
2026-04-21
PHP相关攻击
PHP的学习链接:PHP 1.基础信息泄露与配置缺陷1.1phpinfo()信息泄露1<?php phpinfo(); ?> 泄露内容: PHP版本号、编译选项 系统环境变量(PATH、USER等) 扩展加载情况(危险扩展如exec、system) 绝对路径(DOCUMENT_ROOT、SCRIPT_FILENAME) Session存储位置、上传临时目录 1.2错误报告泄露123// 危险配置error_reporting(E_ALL);ini_set('display_errors', 'on'); 泄露内容: 绝对路径 数据库报错 表结构 SQL语句片段 2.文件包含漏洞(LFI/RFI)2.1本地文件包含(LFI)漏洞代码: 12$page = $_GET['page'];include($page . '.php'); 攻击载荷: 12345678// 读取系统文件?page=../../../../etc/passwd%00// 读取源码(需要过滤器)?page=php...
bby
Articles
9
Tags
19
Categories
5
Follow Me
Announcement
This is my Blog
Recent Posts
2026LitCTF-Crypto方向赛题解答
2026-05-23
http请求
2026-04-25
PHP相关攻击
2026-04-21
ECC加解密
2026-04-10
DES加解密
2026-04-08