[Web]easy_tornado-pyz xp0int Posted on Oct 14 2018 #easy_tornado 翻下tornado的官方文档 https://tornado.readthedocs.io/en/latest/guide/templates.html#template-syntax handler.settings可以获取配置信息 Ssti 获取cookie_secret ![title](https://leanote.com/api/file/getImage?fileId=5bc1d5d8ab644114160023e6) 构造新的签名 ![title](https://leanote.com/api/file/getImage?fileId=5bc1d5ddab644114160023e9) 获取flag ![title](https://leanote.com/api/file/getImage?fileId=5bc1d5e3ab644114160023ee) 打赏还是打残,这是个问题 赏 Wechat Pay Alipay [Misc]迟来的签到题-pyz [Pwn]Shopping Cart - Cpt.shao
没有帐号? 立即注册