Skip to content

Month: December 2017

SECCON 2017 QUAL WEB WRITEUP

Posted in 未分类

SECCON 2017 Web Write Up Log Search http://logsearch.pwn.seccon.jp/logsearch.php 进入后有个 Search,看 input 框内的提示,似乎传过去是 Request.path ,查看文档,发现 URI Search 一说。 https://www.elastic.co/guide/en/elasticsearch/reference/5.5/search-uri-request.html 那就构造一个查询,request 中包含 flag,response 中包含 200即可。 即: request:flag…