https://baozongwi.xyz/tags/procfs/Currently exploring Java security and internal network penetration, with CTFs as a hobby.Hugozh-cnhttps://baozongwi.xyz/p/dasctf-2024-golden-autumn-october/Sat, 19 Oct 2024 21:33:07 +0000https://baozongwi.xyz/p/dasctf-2024-golden-autumn-october/0x01 前言 之前学到flask计算pin值的时候就知道一个1可以代替self，来进行文件读取，不过基本没用过，最近有个CTF，我不知道叫什么，cxcx师傅来和我交流说pin值说好了，如何进console，此时是400错误，我左思右想，想不到这啥情况，难不成不打pin值？结果最后就是读取了环境变量 0x02 …