web97笔记(强比较md5类型-数组处理)

<?php

/*
# -*- coding: utf-8 -*-
# @Author: h1xa
# @Date:   2020-09-16 11:25:09
# @Last Modified by:   h1xa
# @Last Modified time: 2020-09-18 19:36:32
# @link: https://ctfer.com

*/

include("flag.php");
highlight_file(__FILE__);
if (isset($_POST['a']) and isset($_POST['b'])) {
if ($_POST['a'] != $_POST['b'])
if (md5($_POST['a']) === md5($_POST['b']))
echo $flag;
else
print 'Wrong.';
}
?>

强比较md5类型题目,这⾥md5总结可以看南神的博客  https://www.wlhhlc.top/posts/16813/
md5函数处理数组会返回NULL,两个NULL即相等

a != b and md5(a) === md5(b)
 
这⾥直接传两数组,都返回Null

payload为

post:
a[]=1&b[]=2

 

posted @ 2025-03-18 11:23  justdoIT*  阅读(7)  评论(0)    收藏  举报