опять eval

Discussion in 'Песочница' started by brown, 19 Apr 2023.

  1. brown

    brown Member

    Joined:
    16 Oct 2016
    Messages:
    267
    Likes Received:
    12
    Reputations:
    1
    В общем стоит какойто фильтр на ковычки
    ${@print(phpinfo())} выполняет
    ${@print("hello")} не выполняет eval()'d code on line 19

    Можно както обойти?
     
    #1 brown, 19 Apr 2023
  2. Shawn1x

    Shawn1x Elder - Старейшина

    Joined:
    24 Aug 2007
    Messages:
    307
    Likes Received:
    536
    Reputations:
    13
    пробовал пинча подгрузить?
     
    #2 Shawn1x, 20 Apr 2023
  3. brown

    brown Member

    Joined:
    16 Oct 2016
    Messages:
    267
    Likes Received:
    12
    Reputations:
    1
    улыбнуло
     
    #3 brown, 20 Apr 2023
  4. eminlayer7788

    eminlayer7788 Member

    Joined:
    31 Jul 2015
    Messages:
    202
    Likes Received:
    78
    Reputations:
    8
    #4 eminlayer7788, 20 Apr 2023
  5. test_0x74657374

    test_0x74657374 New Member

    Joined:
    26 Apr 2023
    Messages:
    1
    Likes Received:
    1
    Reputations:
    0
    Ну а если в агрумент функции передать $_REQUEST[0] и в само поле запроса 0=hello ?
     
    #5 test_0x74657374, 26 Apr 2023
    totenkopf likes this.
  6. b3

    b3 Banned

    Joined:
    5 Dec 2004
    Messages:
    2,174
    Likes Received:
    1,157
    Reputations:
    202
    #6 b3, 27 Apr 2023
(You must log in or sign up to post here.)
Language
English (US)
    ANTICHAT ™ © 2001-2027 Antichat Kft.