Skip to content

24-web-egg-吴怀增.md #91

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
magicliuyu wants to merge 4 commits into
base: main
Choose a base branch
from
Open

24-web-egg-吴怀增.md #91

Changes from all commits
Commits
Show all changes
4 commits
Select commit Hold shift + click to select a range
b4d758d
Update 24-web-egg-吴怀增.md
magicliuyu Apr 25, 2026
1664c4f
Update 24-web-egg-吴怀增.md
magicliuyu Apr 25, 2026
442b4c9
Update 24-web-egg-吴怀增.md
magicliuyu Apr 25, 2026
87339dd
Merge branch 'Fruit-Guardians:main' into main
magicliuyu Apr 25, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
74 changes: 33 additions & 41 deletions Web/submissions/24-web-egg-吴怀增.md
View file
Open in desktop
Original file line number Diff line number Diff line change
@@ -1,4 +1,4 @@
# write up
# write up #写出来

## 1.SWPUCTF 2021 新生赛

Expand All @@ -8,44 +8,40 @@

一般来说都是在脚本script这里

！[这是图片]("C:\Users\ASUS\Pictures\Screenshots\屏幕截图 2026-04-18 180253.png")
！[截图在这里](https://github.com/magicliuyu/picture/blob/main/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202026-04-21%20193333.png)
旁边有注释说flag在这里



<img src="file:///C:/Users/ASUS/AppData/Roaming/marktext/images/2026-04-18-18-07-52-image.png" title="" alt="" width="608">

## 2.Web安全入门指北—GET

题目来源[[MoeCTF 2021]Web安全入门指北—GET]([[MoeCTF 2021]Web安全入门指北—GET - NSSCTF](https://www.nssctf.cn/problem/3412))

![](C:\Users\ASUS\AppData\Roaming\marktext\images\2026-04-18-20-51-41-image.png)

题目来源[[MoeCTF 2021 2021年MoeCTF]Web安全入门指北—GET]([[MoeCTF 2021 2021年MoeCTF]Web安全入门指北—GET - NSSCTF](https://www.nssctf.cn/problem/3412))
！[题目截图](https://github.com/magicliuyu/picture/blob/main/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202026-04-18%20205130.png)
这一题是php语言用get请求，一般来说可以用hackbar插件进行get请求，把moe="flag"就可以获得flag

我这里用python编写了一个小脚本获取flag

![](C:\Users\ASUS\AppData\Roaming\marktext\images\2026-04-18-20-55-19-image.png)
![python脚本](https://github.com/magicliuyu/picture/blob/main/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202026-04-18%20205514.png)

其中url为题目的端口号

这样依旧可以拿到flag

![](C:\Users\ASUS\AppData\Roaming\marktext\images\2026-04-18-21-10-39-image.png)

## 3. [qsnctf-NO.0902robots.txt]([青少年CTF练习平台](https://www.qsnctf.com/#/main/driving-range?page=1&category=&difficulty=&keyword=robots.txt&user_answer=&user_favorite=&tag_ids=&challenge_id=902))

![运行结果](https://github.com/magicliuyu/picture/blob/main/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202026-04-18%20211034.png)
## 3. [qsnctf-NO.0902robots.txt]([青少年CTF练习平台](https://www.qsnctf.com/#/main/driving-range?page=1&category=&difficulty=&keyword=robots.txt&user_answer=&user_favorite=&tag_ids=&challenge_id=902)[青少年CTF练习平台](https://www.qsnctf.com/#/main/driving-range?page=1&category=&difficulty=&keyword=robots.txt&user_answer=&user_favorite=&tag_ids=&challenge_id=902))## 3. [qsnctf-NO.0902robots.txt]([青少年CTF练习平台](https://www.qsnctf.com/#/main/driving-range?page=1&category=&difficulty=&keyword=robots.txt&user_answer=&user_favorite=&tag_ids=&challenge_id=902)[青少年CTF练习平台](https://www.qsnctf.com/#/main/driving-range?page=1&category=&difficulty=&keyword=robots.txt&user_answer=&user_favorite=&tag_ids=&challenge_id=902))
根据提示访问robot.txt

![](C:\Users\ASUS\AppData\Roaming\marktext\images\2026-04-18-21-53-15-image.png)
![图片](https://github.com/magicliuyu/picture/blob/main/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202026-04-18%20215205.png)

这里有admin,login,secret三个，一般来说secret大概率是，进去后如下

![](C:\Users\ASUS\AppData\Roaming\marktext\images\2026-04-18-21-55-52-image.png)
![进去结果](https://github.com/magicliuyu/picture/blob/main/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202026-04-18%20215549.png)

从而拿到了用户账号密码

获取flag![](C:\Users\ASUS\AppData\Roaming\marktext\images\2026-04-18-21-56-58-image.png)

获取flag
![flag](https://github.com/magicliuyu/picture/blob/main/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202026-04-18%20215642.png)![标记](https://github.com/magicliuyu/picture/blob/main/%e5%b1%8f%e5%b9%95%e6%88%aa%e5%9b%be%202026 - 04 - 18% - 20215642. - png)
# 工具

## 1.bursuip
Expand All @@ -54,29 +50,28 @@

下载好burpsuite文件

![](C:\Users\ASUS\AppData\Roaming\marktext\images\2026-04-18-23-39-45-image.png)
![](https://github.com/magicliuyu/picture/blob/main/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202026-04-18%20231224.png)

运行bp一键运行（要注意的是你的电脑要配置Java环境，用国内的镜像下载的快一些）

![](C:\Users\ASUS\AppData\Roaming\marktext\images\2026-04-18-23-41-17-image.png)

![](https://github.com/magicliuyu/picture/blob/main/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202026-04-18%20233759.png)
点击*run*,之后把license复制到key中

![](C:\Users\ASUS\AppData\Roaming\marktext\images\2026-04-18-23-42-58-image.png)

![](C:\Users\ASUS\AppData\Roaming\marktext\images\2026-04-18-23-44-47-image.png)![](C:\Users\ASUS\AppData\Roaming\marktext\images\2026-04-18-23-45-01-image.png)

![](C:\Users\ASUS\AppData\Roaming\marktext\images\2026-04-18-23-46-00-image.png)

## 2. dirsearch
![图片](https://github.com/magicliuyu/picture/blob/main/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202026-04-18%20234113.png)
![图片](https://github.com/magicliuyu/picture/blob/main/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202026-04-18%20234243.png)
![图片](https://github.com/magicliuyu/picture/blob/main/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202026-04-18%20234442.png)
![图片](https://github.com/magicliuyu/picture/blob/main/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202026-04-18%20234456.png)
![图片](https://github.com/magicliuyu/picture/blob/main/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202026-04-18%20234553.png)
## 2. dirsearch # 2 .dirsearch# 2 .Dirsearch # 2。# 2 .Dirsearch # 2。Dirsearch # 2。搜索# 2。# 2 .Dirsearch # 2。Dirsearch # 2。搜索# 2。# 2。搜索# 2。搜索# 2。搜索# 2。

建议阅读([dirsearch使用教程_dirsearch的使用方法-CSDN博客](https://blog.csdn.net/m0_48574718/article/details/129244162))

可以从里面下载dirsearch安装包

再输入*pip3 install -r requirements.txt*安装依赖

这里查看大概用法![](C:\Users\ASUS\AppData\Roaming\marktext\images\2026-04-19-00-57-32-image.png)
这里查看大概用法
![](https://github.com/magicliuyu/picture/blob/main/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202026-04-19%20005726.png）

一般常用的命令

Expand All @@ -98,19 +93,16 @@ python dirsearch.py -u http://xxxx -r -t 30 --proxy 127.0.0.1:8080 //使

这里的虚拟机是我培训之前就已经安装过了的，所以没有安装截图

![](C:\Users\ASUS\AppData\Roaming\marktext\images\2026-04-19-01-18-57-image.png)

![](https://github.com/magicliuyu/picture/blob/main/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202026-04-19%20011743.png）
打开之前配置的kali虚拟镜像（这里的镜像下载建议使用国内镜像，下载速度飞快）

启动

![](C:\Users\ASUS\AppData\Roaming\marktext\images\2026-04-19-01-20-07-image.png)

![](C:\Users\ASUS\AppData\Roaming\marktext\images\2026-04-19-01-25-39-image.png)
![](https://github.com/magicliuyu/picture/blob/main/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202026-04-19%20011959.png）

![](https://github.com/magicliuyu/picture/blob/main/%E5%B1%8F%E5%B9%95%E6%88%AA%E5%9B%BE%202026-04-19%20012622.png）
开机后输入账号密码进入

![](C:\Users\ASUS\AppData\Roaming\marktext\images\2026-04-19-01-26-28-image.png)

之前我配置的时候他还需要配置网卡，内存，运行核等，这个可以看哔站上的视频跟着学。

Expand Down Expand Up @@ -165,15 +157,15 @@ poweroff 正常关闭电脑

作用：在文件内容、命令输出里**精准查找匹配指定字符串**

<style>
table { border-collapse: collapse; width: 100%; }
th, td { border: 1px solid #ccc; padding: 8px; text-align: left; }
</style>
<style> < style> “风格”
table { border-collapse: collapse; width: 100%; }表{border-collapse: collapse；宽度:100%;｝
th, td { border: 1px solid #ccc; padding: 8px; text-align: left; }Th, td {border: 1px solid #ccc；填充:8 px;text-align:左;｝
</style> < / style>

<style>
table { border-collapse: collapse; width: 100%; }
th, td { border: 1px solid #ccc; padding: 8px; text-align: left; }
</style>
<style> < style> “风格”
table { border-collapse: collapse; width: 100%; }表{border-collapse: collapse；宽度:100%;｝表{border-collapse: collapse；宽度:100%;}} {border-collapse: collapse；｝
th, td { border: 1px solid #ccc; padding: 8px; text-align: left; }Th, td {border: 1px solid #ccc；填充:8 px;text-align:左;｝
</style> < / style> “风格”。

| 参数 | 作用 |
| ---- | -------------------- |
Expand Down