℡

icon indicating a website link https://l1nyz-tel.cc/ icon indicating an email [email protected]

icon company Sun Yat-sen University icon location Guangzhou, China icon location Rookie CTF Weber. Cyber Security. Fantastic Journey.

Results 2 comments of ℡

二维码过期了

师傅你好，二维码又又又过期了...

[fix] 修复任意文件删除

# pandax 任意文件删除 后台一处接口存在任意文件删除 定位到代码位置 `apps/system/router/upload.go#40` 删除图片的处理函数具体实现为 这里即可以直接跨目录删除任意文件 ```http DELETE http://127.0.0.1:7788/upload/delete?fileName=../../../../../../../../../tmp/1.txt HTTP/1.1 Host: 127.0.0.1:7788 sec-ch-ua: "Chromium";v="105", "Not)A;Brand";v="8" Origin: http://127.0.0.1:7788 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML,...