https://lily2663.top/tags/wp/记录Hugozh-CNWed, 15 Apr 2026 00:00:00 +0800https://lily2663.top/posts/0xgame2024/Wed, 15 Apr 2026 00:00:00 +0800https://lily2663.top/posts/0xgame2024/1.hello_web <!-- 此乃flag的第一段：0xGame{ee7f2040-1987-4e0a --> 看响应包 æ­¤ä¹�flagç��第äº�段ï¼�-872d-68589c4ab3d3} 2.ez_login 0xGame{It_Is_Easy_Right?} 弱密码爆破 3.ez_rce from flask import Flask, request import subprocess app = Flask(__name__) @app.route("/") def index(): return open(__file__).read() @app.route("/calc", methods=['POST']) def calculator(): expression = request.form.get('expression') or "114 1000 * 514 + p" result = subprocess.run(["dc", "-e", expression], capture_output=True, text=True) return result.stdout if __name__ == "__main__": app.run(host="0.0.0.0", port=8000) 代码：https://lily2663.top/posts/pctf2025web/Fri, 03 Apr 2026 00:00:00 +0800https://lily2663.top/posts/pctf2025web/1.ezupload