老版Bugku代码审计writeup
老版Bugku代码审计writeup1.extract()变量覆盖http://123.206.87.240:9009/1.php<?php$flag='xxx';extract($_GET);if(isset($shiyan)){$content=trim(file_get_contents($flag));if($shiyan==$content){echo'fla...