萌新web4

 

Luckily, the addtional regular expression dose not contains the prefix '~', so wo still could exploit that payload '~~1000' to bypass the filiter. 

 

Done. It's quiet easy, isn't it?

posted @ 2021-08-04 22:17  _4_FUN  阅读(29)  评论(0)    收藏  举报