hongrisec / php-audit-labs Goto Github PK

这个项目真的做得好好！！！七月火...他真的，我哭死，太好了
好希望能继续做同类项目

过滤了or，就是过滤了information_schema，我用schema_auto_increment_columns绕过了information_schema，查出了当前库下存在flag表，但flag表下存在flag列是怎么查出来的我不清楚，望解答

in this docker file:

FROM zhhhy/lampp


ADD ./day1/ /var/www/html
RUN ls /var/www/html/
RUN chmod 777 /var/www/html/run.sh
CMD ["sh","/var/www/html/run.sh"]
EXPOSE 80

use zhhhy/lampp as a default images, however, it's not found now, mayble it's owner has deleted it.

Day5最后的实例我愣是没找到哪里用了escapshellcmd这个函数= =

docker hub 不存在基础镜像的说

docker build -t day1 .
Emulate Docker CLI using podman. Create /etc/containers/nodocker to quiet msg.
STEP 1/6: FROM zhhhy/lamp
✔ registry.access.redhat.com/zhhhy/lamp:latest
Trying to pull registry.access.redhat.com/zhhhy/lamp:latest...
Error: creating build container: initializing source docker://registry.access.redhat.com/zhhhy/lamp:latest: reading manifest latest in registry.access.redhat.com/zhhhy/lamp: name unknown: Repo not found

题目2的解绕不过的节奏

Note the extra ; after the if condition, the echo statement will always execute.