CTFshow-月饼杯&吃瓜杯
日常练习题 题目来源：ctf.show 月饼杯 Web1_此月圆 题目附件中有的index.php <?php class a { public $uname; public $password; public function __construct($uname,$password) { $this->uname=$uname; $this->password=$password; } public function __wakeup() { if($this->password==='yu22x') { include('flag.php'); echo $flag; } else { echo 'wrong password'; } } } function filter($string){ return str_replace('Firebasky','Firebaskyup',$string); } $uname=$_GET[1]; $password=1; $ser=filter(serialize(new a($uname,$password))); $test=unserialize($ser); ?> 这里只能GET传入一个名为1的变量，password是已经设置好为1的 ...