From f72c9e195b06bb1f04ab6d5ca9581776ebea02ff Mon Sep 17 00:00:00 2001
From: jiangsir <1463310682@qq.com>
Date: Thu, 12 Sep 2024 18:09:24 +0800
Subject: [PATCH] =?UTF-8?q?=E4=B8=8A=E4=BC=A0=E6=96=87=E4=BB=B6=E8=87=B3?=
 =?UTF-8?q?=20src?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 src/flag.sh              |  3 +++
 src/flllllllllllllag.txt |  1 +
 src/index.php            | 15 +++++++++++++++
 3 files changed, 19 insertions(+)
 create mode 100644 src/flag.sh
 create mode 100644 src/flllllllllllllag.txt
 create mode 100644 src/index.php

diff --git a/src/flag.sh b/src/flag.sh
new file mode 100644
index 0000000..27dd641
--- /dev/null
+++ b/src/flag.sh
@@ -0,0 +1,3 @@
+#!/bin/sh
+sed -i "s/FLAGFLAGFLAG/$GZCTF_FLAG/" /var/www/html/flllllllllllllag.txt
+export GZCTF_FLAG=""
diff --git a/src/flllllllllllllag.txt b/src/flllllllllllllag.txt
new file mode 100644
index 0000000..627485b
--- /dev/null
+++ b/src/flllllllllllllag.txt
@@ -0,0 +1 @@
+FLAGFLAGFLAG
diff --git a/src/index.php b/src/index.php
new file mode 100644
index 0000000..0ee60cf
--- /dev/null
+++ b/src/index.php
@@ -0,0 +1,15 @@
+<?php
+if(isset($_GET['jiangsir'])){
+    $code=$_GET['jiangsir'];
+    if (!preg_match('/sys|pas|read|file|ls|cat|tac|head|tail|more|less|php|base|echo|cp|\$|\*|\+|\^|scan|\.|local|next|all|hex2bin|im|shell/i',$code)){
+        echo '如果你这么做jiangsir会告诉你不可以!!';echo '<br>';
+        eval($jiangsir);
+    }
+    else{
+        die("额你在幻想些什么??");
+    }
+}
+else{
+    echo "孩子别学了......";
+    show_source(__FILE__);
+}
\ No newline at end of file