{"id":320,"date":"2026-09-07T15:26:57","date_gmt":"2026-09-07T07:26:57","guid":{"rendered":"https:\/\/cookie-qwq.xyz\/?p=320"},"modified":"2026-09-07T22:14:25","modified_gmt":"2026-09-07T14:14:25","slug":"%e9%9d%92%e5%b2%91ctf-%e5%88%ab%e7%ac%91%ef%bc%8c%e4%bd%a0%e4%b9%9f%e8%bf%87%e4%b8%8d%e4%ba%86%e7%ac%ac%e4%ba%8c%e5%85%b3","status":"publish","type":"post","link":"https:\/\/cookie-qwq.xyz\/index.php\/2026\/09\/07\/%e9%9d%92%e5%b2%91ctf-%e5%88%ab%e7%ac%91%ef%bc%8c%e4%bd%a0%e4%b9%9f%e8%bf%87%e4%b8%8d%e4%ba%86%e7%ac%ac%e4%ba%8c%e5%85%b3\/","title":{"rendered":"\u9752\u5c91CTF-\u522b\u7b11\uff0c\u4f60\u4e5f\u8fc7\u4e0d\u4e86\u7b2c\u4e8c\u5173"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">\u9898\u76ee\u94fe\u63a5\uff1a<a href=\"https:\/\/ctf.qingcen.net\/challenges\/26?problemSetId=1&amp;from=challenges\">\u9752\u5c91\u7f51\u5b89 | QingCen CTF<\/a><\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/cookie-qwq.xyz\/wp-content\/uploads\/2026\/09\/image-101-1024x202.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"202\" data-original=\"https:\/\/cookie-qwq.xyz\/wp-content\/uploads\/2026\/09\/image-101-1024x202.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-321\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">1.\u542f\u52a8\u5bb9\u5668\uff0c\u5206\u6790\u9898\u76ee<\/p>\n\n\n\n<figure class=\"wp-block-image size-large\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/cookie-qwq.xyz\/wp-content\/uploads\/2026\/09\/image-102-1024x819.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"819\" data-original=\"https:\/\/cookie-qwq.xyz\/wp-content\/uploads\/2026\/09\/image-102-1024x819.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-322\"  sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u96be\u7ef7\u7684\u754c\u9762\ud83d\ude05<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/cookie-qwq.xyz\/wp-content\/uploads\/2026\/09\/image-103.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"681\" height=\"222\" data-original=\"https:\/\/cookie-qwq.xyz\/wp-content\/uploads\/2026\/09\/image-103.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-323\"  sizes=\"auto, (max-width: 681px) 100vw, 681px\" \/><\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u4fdd\u6301\u9b54\u4e38\u4e0d\u52a8\uff0c\u6700\u540e\u5f39\u51fa\u63d0\u793a\u4e0d\u591f30\u5206\uff0c\u90a3\u628a\u7b2c\u4e00\u5173\u73a9\u4e86<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/cookie-qwq.xyz\/wp-content\/uploads\/2026\/09\/image-104.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"648\" height=\"213\" data-original=\"https:\/\/cookie-qwq.xyz\/wp-content\/uploads\/2026\/09\/image-104.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-324\"  sizes=\"auto, (max-width: 648px) 100vw, 648px\" \/><\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u7b2c\u4e8c\u5173<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/cookie-qwq.xyz\/wp-content\/uploads\/2026\/09\/image-105.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"711\" height=\"216\" data-original=\"https:\/\/cookie-qwq.xyz\/wp-content\/uploads\/2026\/09\/image-105.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-325\"  sizes=\"auto, (max-width: 711px) 100vw, 711px\" \/><\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u7b2c\u4e8c\u5173\u5c45\u7136\u8981\u8fd9\u4e48\u591a\u5206\uff0c\u80af\u5b9a\u8fc7\u4e0d\u4e86\uff0c\u67e5\u770b\u9875\u9762\u6e90\u7801<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u627e\u5230\u4e86\uff0c\u83b7\u53d6flag\u6700\u91cd\u8981\u7684\u4ee3\u7801\u5757<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/cookie-qwq.xyz\/wp-content\/uploads\/2026\/09\/image-106.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"627\" height=\"234\" data-original=\"https:\/\/cookie-qwq.xyz\/wp-content\/uploads\/2026\/09\/image-106.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-326\"  sizes=\"auto, (max-width: 627px) 100vw, 627px\" \/><\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u8fd9\u5757\u4ee3\u7801\u7684\u610f\u601d\u662f\uff0c\u8bf7\u6c42\u9898\u76ee\u5730\u5740<strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-red-color\">\/flag.php<\/mark><\/strong>\u7684<strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-purple-color\">URL<\/mark><\/strong>\u8def\u5f84\uff0c\u65b9\u6cd5\u4e3a<strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-green-cyan-color\">POST<\/mark><\/strong><\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-luminous-vivid-amber-color\">body<\/mark><\/strong>\u7684\u53c2\u6570\u662f<mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-cyan-blue-color\"><strong>formData.toString()<\/strong><\/mark><\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u518d\u770b\u4ee3\u7801\u5757\u7684\u4e0a\u65b9\uff0c\u6b63\u597d\u6709\u4e00\u4e2a<strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-vivid-cyan-blue-color\">formData.append()<\/mark><\/strong>\uff0c\u91cc\u9762\u7684\u53c2\u6570\u5c31\u662fscore<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u6240\u4ee5\u8fd9\u91cc<strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-luminous-vivid-amber-color\">body<\/mark><\/strong>\u7684<mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-pale-pink-color\"><strong>payload<\/strong><\/mark>\u6784\u9020\u6838\u5fc3\u662fscore\u8fd9\u4e2a\u53d8\u91cf\uff0c\u7531\u4e8e\u7b2c\u4e8c\u5173\u7684\u76ee\u6807\u5206\u6570\u975e\u5e38\u9ad8\uff0c\u6240\u4ee5\u6211\u4eec\u4f20\u9012\u7684score\u7684\u503c\u4e5f\u5fc5\u987b\u975e\u5e38\u5927\u3002<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u4f7f\u7528<strong><mark style=\"background-color:rgba(0, 0, 0, 0)\" class=\"has-inline-color has-cyan-bluish-gray-color\">hackbar<\/mark><\/strong>\u6784\u9020payload<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/cookie-qwq.xyz\/wp-content\/uploads\/2026\/09\/image-107.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"831\" height=\"654\" data-original=\"https:\/\/cookie-qwq.xyz\/wp-content\/uploads\/2026\/09\/image-107.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-327\"  sizes=\"auto, (max-width: 831px) 100vw, 831px\" \/><\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u6784\u9020\u5b8c\u6210\u540e\u9009\u62e9EXCUTE<\/p>\n\n\n\n<figure class=\"wp-block-image size-full\"><div class='fancybox-wrapper lazyload-container-unload' data-fancybox='post-images' href='https:\/\/cookie-qwq.xyz\/wp-content\/uploads\/2026\/09\/image-109.png'><img class=\"lazyload lazyload-style-1\" src=\"data:image\/svg+xml;base64,PCEtLUFyZ29uTG9hZGluZy0tPgo8c3ZnIHdpZHRoPSIxIiBoZWlnaHQ9IjEiIHhtbG5zPSJodHRwOi8vd3d3LnczLm9yZy8yMDAwL3N2ZyIgc3Ryb2tlPSIjZmZmZmZmMDAiPjxnPjwvZz4KPC9zdmc+\"  loading=\"lazy\" decoding=\"async\" width=\"879\" height=\"183\" data-original=\"https:\/\/cookie-qwq.xyz\/wp-content\/uploads\/2026\/09\/image-109.png\" src=\"data:image\/png;base64,iVBORw0KGgoAAAANSUhEUgAAAAEAAAABCAYAAAAfFcSJAAAAAXNSR0IArs4c6QAAAARnQU1BAACxjwv8YQUAAAAJcEhZcwAADsQAAA7EAZUrDhsAAAANSURBVBhXYzh8+PB\/AAffA0nNPuCLAAAAAElFTkSuQmCC\" alt=\"\" class=\"wp-image-329\"  sizes=\"auto, (max-width: 879px) 100vw, 879px\" \/><\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">\u6700\u540e\u5f97\u5230\u4e86flag<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u8fd9\u9053\u9898\u76ee\u7528Burp suite\u4e5f\u53ef\u4ee5\u4f5c\uff0c\u6211\u8981\u4e0b\u8bfe\u4e86\u5148\u4e0d\u5199\u4e86\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"<p>\u9898\u76ee\u94fe\u63a5\uff1a\u9752\u5c91\u7f51\u5b89 | QingCen CTF 1.\u542f\u52a8\u5bb9\u5668\uff0c\u5206\u6790\u9898\u76ee \u96be\u7ef7\u7684\u754c\u9762\ud83d\ude05 \u4fdd\u6301\u9b54\u4e38\u4e0d\u52a8\uff0c\u6700\u540e\u5f39\u51fa\u63d0 [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[6,15],"class_list":["post-320","post","type-post","status-publish","format-standard","hentry","category-archives","tag-ctf","tag-web"],"_links":{"self":[{"href":"https:\/\/cookie-qwq.xyz\/index.php\/wp-json\/wp\/v2\/posts\/320","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/cookie-qwq.xyz\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/cookie-qwq.xyz\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/cookie-qwq.xyz\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/cookie-qwq.xyz\/index.php\/wp-json\/wp\/v2\/comments?post=320"}],"version-history":[{"count":2,"href":"https:\/\/cookie-qwq.xyz\/index.php\/wp-json\/wp\/v2\/posts\/320\/revisions"}],"predecessor-version":[{"id":332,"href":"https:\/\/cookie-qwq.xyz\/index.php\/wp-json\/wp\/v2\/posts\/320\/revisions\/332"}],"wp:attachment":[{"href":"https:\/\/cookie-qwq.xyz\/index.php\/wp-json\/wp\/v2\/media?parent=320"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/cookie-qwq.xyz\/index.php\/wp-json\/wp\/v2\/categories?post=320"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/cookie-qwq.xyz\/index.php\/wp-json\/wp\/v2\/tags?post=320"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}