https://blog.xxchenchen.top/tags/web/ Recent content in Web on ChenOvo Hugo -- gohugo.io en-us ChenOvo Tue, 28 Apr 2026 15:34:32 +0800 https://blog.xxchenchen.top/p/qingcen%E9%9D%B6%E5%9C%BAweb%E5%85%A5%E9%97%A8wp-%E4%B8%8B/ Tue, 28 Apr 2026 15:34:32 +0800 https://blog.xxchenchen.top/p/qingcen%E9%9D%B6%E5%9C%BAweb%E5%85%A5%E9%97%A8wp-%E4%B8%8B/ <img src="https://blog.xxchenchen.top/img/qingcenctf-cover.svg" alt="Featured image of post QingCen靶场Web入门wp 下" /><h2 id="前言">前言 </h2><p>终于到最后了，累/(ㄒoㄒ)/~~</p> <h2 id="ezxss">EZXSS </h2><h3 id="ezxss-1">EZXSS </h3><h3 id="ezxss_1">EZXSS_1 </h3><h3 id="ezxss_2">EZXSS_2 </h3><h2 id="ezxxe">EZXXE </h2><h3 id="ezxxe-1">EZXXE </h3><h3 id="ezxxe_1">EZXXE_1 </h3><h3 id="ezxxe_2">EZXXE_2 </h3><h3 id="ezxxe_3">EZXXE_3 </h3><h2 id="ezssrf">EZSSRF </h2><h3 id="ezssrf-1">EZSSRF </h3><h3 id="ezssrf_1">EZSSRF_1 </h3><h3 id="ezssrf_2">EZSSRF_2 </h3><h3 id="ezssrf_3">EZSSRF_3 </h3><h3 id="ezssrf_4">EZSSRF_4 </h3><h3 id="ezssrf_5">EZSSRF_5 </h3><h3 id="ezssrf_6">EZSSRF_6 </h3><h2 id="ezjwt">EZJWT </h2><h3 id="ezjwt-1">EZJWT </h3><h3 id="ezjwt_1">EZJWT_1 </h3><h3 id="ezjwt_2">EZJWT_2 </h3><h2 id="ezpop">EZPOP </h2><h3 id="ezpop-1">EZPOP </h3><h3 id="ezpop_1">EZPOP_1 </h3><h3 id="ezpop_2">EZPOP_2 </h3><h3 id="ezpop_3">EZPOP_3 </h3><h3 id="ezpop_4">EZPOP_4 </h3><h3 id="ezpop_5">EZPOP_5 </h3><h3 id="ezpop_6">EZPOP_6 </h3><h3 id="ezpop_7">EZPOP_7 </h3><h3 id="ezpop_8">EZPOP_8 </h3> https://blog.xxchenchen.top/p/qingcen%E9%9D%B6%E5%9C%BAweb%E5%85%A5%E9%97%A8wp-%E4%B8%AD/ Tue, 28 Apr 2026 15:34:23 +0800 https://blog.xxchenchen.top/p/qingcen%E9%9D%B6%E5%9C%BAweb%E5%85%A5%E9%97%A8wp-%E4%B8%AD/ <img src="https://blog.xxchenchen.top/img/qingcenctf-cover.svg" alt="Featured image of post QingCen靶场Web入门wp-中" /><h2 id="前言">前言 </h2><p>继续~ 继续~ 鸽了好久</p> <h2 id="ezfl">EZFL </h2><h3 id="ezflphp-文件包含">EZFL(PHP 文件包含) </h3><p>访问靶机 <img src="https://cloudflare-imgbed.3285433461.workers.dev/file/1780064985077_fl_1.png" loading="lazy" decoding="async" alt="fl_1.png" > <br> 先随便点点，没有发现什么特殊交互和信息，看一下注释 发现两行特别注释</p> <p>第一条注释确认了后端使用 include($file) 进行文件包含<br> 第二条 Base64 解码后为：flag is in /flag.txt<br> <img src="https://cloudflare-imgbed.3285433461.workers.dev/file/1780064990744_fl_2.png" loading="lazy" decoding="async" alt="fl_2.png" > <br> <img src="https://cloudflare-imgbed.3285433461.workers.dev/file/1780064985043_fl_3.png" loading="lazy" decoding="async" alt="fl_3.png" > <br> 由于后端 include() 没有对 $file 做路径限制</p> https://blog.xxchenchen.top/p/qingcen%E9%9D%B6%E5%9C%BAweb%E5%85%A5%E9%97%A8wp-%E4%B8%8A/ Tue, 07 Apr 2026 08:52:16 +0800 https://blog.xxchenchen.top/p/qingcen%E9%9D%B6%E5%9C%BAweb%E5%85%A5%E9%97%A8wp-%E4%B8%8A/ <img src="https://blog.xxchenchen.top/img/qingcenctf-cover.svg" alt="Featured image of post QingCen靶场Web入门wp-上" /><h2 id="前言">前言 </h2><p>最近一直在青岑靶场做web入门(菜到只能做这个)，今天分享一下自己的wp。(含ai成分)</p> <p>靶场地址：https://ctf.qingcen.net/</p>