上传文件至 src

src/flag.sh

@@ -0,0 +1,3 @@
+#!/bin/sh
+sed -i "s/FLAGFLAGFLAG/$GZCTF_FLAG/" /var/www/html/flllllllllllllag.txt
+export GZCTF_FLAG=""

src/flllllllllllllag.txt

@@ -0,0 +1 @@
+FLAGFLAGFLAG

src/index.php

@@ -0,0 +1,15 @@
+<?php
+if(isset($_GET['jiangsir'])){
+    $code=$_GET['jiangsir'];
+    if (!preg_match('/sys|pas|read|file|ls|cat|tac|head|tail|more|less|php|base|echo|cp|\$|\*|\+|\^|scan|\.|local|next|all|hex2bin|im|shell/i',$code)){
+        echo '如果你这么做jiangsir会告诉你不可以!!';echo '<br>';
+        eval($jiangsir);
+    }
+    else{
+        die("额你在幻想些什么??");
+    }
+}
+else{
+    echo "孩子别学了......";
+    show_source(__FILE__);
+}