跳到主要内容

Web - 018

备注

created by || sml

⏲️ Release Date // 2022-03-06

💀 Solvers // 112

🧩 Type // web

http://momo.hackmyvm.eu/ZiP004JfyGh/

access /
┌─[randark@parrot]─[~]
└──╼ $http get http://momo.hackmyvm.eu/ZiP004JfyGh/
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Fri, 02 Feb 2024 07:23:43 GMT
Server: nginx/1.18.0
Transfer-Encoding: chunked

<!doctype html>
<html lang="en">
<title>018</title>
Maybe the flag is in aaAxghuyrtlksd.php
</html>
access /aaAxghuyrtlksd.php
┌─[randark@parrot]─[~]
└──╼ $http get http://momo.hackmyvm.eu/ZiP004JfyGh/aaAxghuyrtlksd.php
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Fri, 02 Feb 2024 07:24:18 GMT
Server: nginx/1.18.0
Transfer-Encoding: chunked

Yes, I have the flag! :)

POST 就好了

┌─[randark@parrot]─[~]
└──╼ $http post http://momo.hackmyvm.eu/ZiP004JfyGh/aaAxghuyrtlksd.php
HTTP/1.1 200 OK
Connection: keep-alive
Content-Encoding: gzip
Content-Type: text/html; charset=UTF-8
Date: Fri, 02 Feb 2024 07:43:13 GMT
Server: nginx/1.18.0
Transfer-Encoding: chunked

HMV{postpostpost}