[wp] 攻防世界 upload1

右键查看源码发现本地js验证

<script type="text/javascript">

Array.prototype.contains = function (obj) {
var i = this.length;
while (i--) {
if (this[i] === obj) {
return true;
}
}
return false;
}

function check(){
upfile = document.getElementById("upfile");
submit = document.getElementById("submit");
name = upfile.value;
ext = name.replace(/^.+\./,'');

if(['jpg','png'].contains(ext)){
submit.disabled = false;
}else{
submit.disabled = true;

alert('请选择一张图片文件上传!');
}

}

</script>

f12

把οnchange="check();"删了

菜刀连上,得到flag

• 点赞
• 收藏
• 分享
• 文章举报