- 开放端口:
8080
- index.php中存在反序列化漏洞,在销毁对象时存在include文件包含,可通过php伪协议读取flag.php文件内容
class Connection
{
public $file;
public function __construct($file)
{
$this->file = $file;
}
public function __sleep()
{
$this->file = 'sleep.txt';
return array('file');
}
public function __wakeup()
{
$this->file = 'wakeup.txt';
}
public function __destruct()
{
include($this->file);
}
}