4 | 听说php可以执行系统函数？我来康康
5 |
9 |
10 | |\'|\"|\\|\(|\)|\[|\]|\{|\}/", $ip, $match)){
14 | print_r($match);
15 | print($ip);
16 | echo preg_match("/\&|\/|\?|\*|\<|[\x{00}-\x{20}]|\>|\'|\"|\\|\(|\)|\[|\]|\{|\}/", $ip, $match);
17 | die("fxck your symbol!");
18 | }
19 | else if(preg_match("/ /", $ip)){
20 | die("fxck your space!");
21 | }
22 | else if(preg_match("/bash/", $ip)){
23 | die("fxck your bash!");
24 | }
25 | else if(preg_match("/.*f.*l.*a.*g.*/", $ip)){
26 | die("fxck your flag!");
27 | }
28 | $a = shell_exec("ping -c 4 ".$ip);
29 | echo "";
30 | print_r($a);
31 | }
32 |
33 | ?>
34 |
35 |
36 |
37 |
38 |
39 |
--------------------------------------------------------------------------------
/Web/strongest_mind/dockerfile/Dockerfile:
--------------------------------------------------------------------------------
1 | FROM orsolin/docker-php-5.3-apache
2 |
3 | LABEL Author="imagin"
4 |
5 | COPY ./files/ /tmp/files/
6 |
7 | RUN mv -f /tmp/files/sources.list /etc/apt/sources.list && \
8 | rm -rf /var/www/html/* && \
9 | mv -f /tmp/files/html/ /var/www/ && \
10 | apt update && \
11 | echo "debconf mysql-server/root_password password root\ndebconf mysql-server/root_password_again password root" >> /tmp/mysql-passwd && \
12 | debconf-set-selections /tmp/mysql-passwd && apt install mysql-server -y && rm -rf /tmp/mysql-passwd && \
13 | mysql_install_db --user=mysql --datadir=/var/lib/mysql && \
14 | sh -c 'mysqld_safe &' && \
15 | sleep 5s && \
16 | chown -R root:root /var/www/html && \
17 | mysql -e "source /tmp/files/db.sql;" -uroot -proot && \
18 | mysql -u root -proot -e "set global read_only=1;" && \
19 | mysql -u root -proot -e "create user '123'@'localhost' identified by '123';" && \
20 | mysql -u root -proot -e "grant select on mind.* to '123'@'localhost';" && \
21 | mysql -u root -proot -e "grant update on mind.* to '123'@'localhost';" && \
22 | mysql -u root -proot -e "grant insert on mind.* to '123'@'localhost';" && \
23 | chmod 777 /tmp/files/restart.sh && \
24 | chmod 755 -R /var/www/html/
--------------------------------------------------------------------------------
/Web/strongest_mind/dockerfile/files/db.sql:
--------------------------------------------------------------------------------
1 | -- phpMyAdmin SQL Dump
2 | -- version 4.6.4
3 | -- https://www.phpmyadmin.net/
4 | --
5 | -- Host: 127.0.0.1
6 | -- Generation Time: 2019-12-06 12:45:28
7 | -- 服务器版本： 5.7.14
8 | -- PHP Version: 5.6.25
9 |
10 | CREATE DATABASE mind;
11 |
12 | use mind;
13 |
14 | SET SQL_MODE = "NO_AUTO_VALUE_ON_ZERO";
15 | SET time_zone = "+00:00";
16 |
17 |
18 | /*!40101 SET @OLD_CHARACTER_SET_CLIENT=@@CHARACTER_SET_CLIENT */;
19 | /*!40101 SET @OLD_CHARACTER_SET_RESULTS=@@CHARACTER_SET_RESULTS */;
20 | /*!40101 SET @OLD_COLLATION_CONNECTION=@@COLLATION_CONNECTION */;
21 | /*!40101 SET NAMES utf8mb4 */;
22 |
23 | --
24 | -- Database: `web6_strongesmind`
25 | --
26 |
27 | -- --------------------------------------------------------
28 |
29 | --
30 | -- 表的结构 `user`
31 | --
32 |
33 | CREATE TABLE `user` (
34 | `token` varchar(50) NOT NULL,
35 | `count` int(11) NOT NULL,
36 | `result` int(11) NOT NULL
37 | ) ENGINE=MyISAM DEFAULT CHARSET=latin1;
38 |
39 | --
40 | -- Indexes for dumped tables
41 | --
42 |
43 | --
44 | -- Indexes for table `user`
45 | --
46 | ALTER TABLE `user`
47 | ADD PRIMARY KEY (`token`);
48 |
49 | /*!40101 SET CHARACTER_SET_CLIENT=@OLD_CHARACTER_SET_CLIENT */;
50 | /*!40101 SET CHARACTER_SET_RESULTS=@OLD_CHARACTER_SET_RESULTS */;
51 | /*!40101 SET COLLATION_CONNECTION=@OLD_COLLATION_CONNECTION */;
52 |
--------------------------------------------------------------------------------
/Web/BabySqli/dockerfile/files/html/search.php:
--------------------------------------------------------------------------------
1 |
2 |