xuenixiang_2021_web_web50
题目首页显示403但状态码是200 ,源码中提示善于发现扫描得到隐藏目录git => .git/HEAD => .git => .git/index => .git/description => .git/config => index.php
使用githack 得到源码 包括文件index.php和flag.php Flag.php中得到flag{GitIsAFreeVessionControlSyStem}
另附githack:https://github.com/lijiejie/GitHack
页:
[1]