TJCTF-2022 WEB
题目作者: 未知
一 血: admin889
一血奖励: 0金币
解 决: 3
提 示:
描 述:
My games always play at like 3 fps, so I thought it'd be more efficient to send individual frames rather than videos. Anyways, I'm sure my website is unhackable, and that you are never gonna find the flag on my server!
附 件: 下载
看源代码发现flag.txt，随便上传一个文件点download后抓包，发现为 /image/{文件名}/download 形式，试了下flag.txt，../flag.txt，..%2Fflag.txt，成功拿到flag