bby-bloghttp请求 Back to Home

http请求

Created2026-04-25|Updated2026-05-19|web
|Post Views:

学习链接: HTTP 请求方法

Author: bby
Link: http://example.com/2026/04/25/2026-4-25-http%E8%AF%B7%E6%B1%82/
Copyright Notice: All articles on this blog are licensed under CC BY-NC-SA 4.0 unless otherwise stated.
webctf
Previous
2026LitCTF-Crypto方向赛题解答
lit_xor_two_story题目123456789101112131415161718192021222324252627282930313233343536373839404142434445464748495051525354555657585960616263646566676869707172737475767778798081828384858687888990919293949596979899100101102103104105106107108109110111112113114115116117118119120121122123124125126127128129130131132133134135136137138139140141142143144145146147148149150151152153154155156157158159160161162163164165166167168169170171172173174175176177178179180181182183184185186187188189190191192193194~~~`...
Next
PHP相关攻击
PHP的学习链接:PHP 1.基础信息泄露与配置缺陷1.1phpinfo()信息泄露1<?php phpinfo(); ?> 泄露内容: PHP版本号、编译选项 系统环境变量(PATH、USER等) 扩展加载情况(危险扩展如exec、system) 绝对路径(DOCUMENT_ROOT、SCRIPT_FILENAME) Session存储位置、上传临时目录 1.2错误报告泄露123// 危险配置error_reporting(E_ALL);ini_set('display_errors', 'on'); 泄露内容: 绝对路径 数据库报错 表结构 SQL语句片段 2.文件包含漏洞(LFI/RFI)2.1本地文件包含(LFI)漏洞代码: 12$page = $_GET['page'];include($page . '.php'); 攻击载荷: 12345678// 读取系统文件?page=../../../../etc/passwd%00// 读取源码(需要过滤器)?page=php...
Related Articles
2026-04-21
PHP相关攻击
PHP的学习链接:PHP 1.基础信息泄露与配置缺陷1.1phpinfo()信息泄露1<?php phpinfo(); ?> 泄露内容: PHP版本号、编译选项 系统环境变量(PATH、USER等) 扩展加载情况(危险扩展如exec、system) 绝对路径(DOCUMENT_ROOT、SCRIPT_FILENAME) Session存储位置、上传临时目录 1.2错误报告泄露123// 危险配置error_reporting(E_ALL);ini_set('display_errors', 'on'); 泄露内容: 绝对路径 数据库报错 表结构 SQL语句片段 2.文件包含漏洞(LFI/RFI)2.1本地文件包含(LFI)漏洞代码: 12$page = $_GET['page'];include($page . '.php'); 攻击载荷: 12345678// 读取系统文件?page=../../../../etc/passwd%00// 读取源码(需要过滤器)?page=php...
avatar
bby
Articles
9
Tags
19
Categories
5
Follow Me
Announcement
This is my Blog
Recent Posts
2026LitCTF-Crypto方向赛题解答2026-05-23
http请求2026-04-25
PHP相关攻击2026-04-21
ECC加解密2026-04-10
DES加解密2026-04-08
© 2025 - 2026 By bbyFramework Hexo 8.1.1|Theme Butterfly 5.5.4