Update README.md

Misc

README.md

@@ -10,10 +10,21 @@ This is the first time we have written a project, some of which are collected fr
 	- web_3
 	- web_4
 	- web_5
+	- web_6
+	- web_7
 - **Misc**
 	- Misc_1
 	- Misc_2
 	- Misc_3
+	- Misc_4
+	- Misc_5
+	- Misc_6
+	- Misc_7
+	- Misc_8
+	- Misc_9
+	- Misc_10
+	- Misc_11
+	- Misc_12
 - **Crypto**
 	 - hex
 	 - base
@@ -57,11 +68,6 @@ docker-compose up -d
 ```
  - There is a corresponding documentation in each environment directory, please read this file for vulnerability/environment testing.
 
-## Project maintenance ##
-- WUJINLIN  
-[http://www.whj.website/](http://www.whj.website/)
-- sh1llc0de  
-[https://www.sh1llc0de.xyz/](https://www.sh1llc0de.xyz/)
 ## Disclaimer ##
 Do not use it for illegal purposes, otherwise the serious consequences will not be related to this project.。
 
@@ -71,5 +77,3 @@ Do not use it for illegal purposes, otherwise the serious consequences will not
  
 ## Reprint ##
 Reprinted source：[https://github.com/SecWiki/ctf-hub/](https://github.com/SecWiki/ctf-hub/)
-
-©WUJINLIN,sh1llc0de 2018

misc/MIsc12/README.md

@@ -0,0 +1 @@
+#### 这也是网鼎杯的一道Misc

misc/Misc10/README.md

@@ -0,0 +1 @@
+#### 这是一道网鼎杯的Misc题目。Is it base?

misc/Misc11/REAME.md

@@ -0,0 +1 @@
+#### 这是一道流量分析题目，同样的是王鼎杯的题目

misc/misc_4/README.md

@@ -0,0 +1,2 @@
+### 很简单的一道题目 ###
+### 细心就可以了 ###

misc/misc_5/README.md

@@ -0,0 +1 @@
+### 入门级别的题目，看一眼就会的那种 ###

misc/misc_6/README.md

@@ -0,0 +1 @@
+### 这是我在打网鼎杯的时候，自己做不出的题目。还是看了别人的WP做出来的

misc/misc_6/WP.txt

@@ -0,0 +1,2 @@
+<EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD><EFBFBD>Լ<EFBFBD><EFBFBD>IJ<EFBFBD><EFBFBD>ͣ<EFBFBD>д<EFBFBD><EFBFBD>WP
+https://www.whj.website/blog/2018/08/21/%E9%9A%90%E5%86%99Png(%E7%BD%91%E9%BC%8E%E6%9D%AF)/

misc/misc_7/README.MD

@@ -0,0 +1 @@
+### 是一个简单的加密哦

misc/misc_8/README.md

@@ -0,0 +1 @@
+### 一张简单的图片

misc/misc_9/README.md

@@ -0,0 +1 @@
+### 用python来实现哦

misc/misc_9/yiwei.py

@@ -0,0 +1,13 @@
+from string import maketrans
+
+in_string = "abcdefghijklmnopqrstuvwxyz"
+out_string = "cdefghijklmnopqrstuvwxyzab"
+
+goal = """g fmnc wms bgblr rpylqjyrc gr zw fylb.
+rfyrq ufyr amknsrcpq ypc dmp. bmgle gr gl zw fylb
+gq glcddgagclr ylb rfyr'q ufw rfgq rcvr gq qm jmle.
+sqgle qrpgle.kyicrpylq() gq pcamkkclbcb. lmu ynnjw ml rfc spj."""
+
+trans_string = maketrans(in_string, out_string)
+
+print goal.translate(trans_string)

web/web_6/Dockerfile

@@ -0,0 +1,3 @@
+FROM php:5.6-apache
+
+COPY /code /var/www/html/

web/web_6/README.md

@@ -0,0 +1,2 @@
+## 恐龙的特性 ##
+x计划平台上面的一道原题。

web/web_6/code/flag.php

@@ -0,0 +1 @@
+flag{eazy_ping}

web/web_6/code/index.php

@@ -0,0 +1,18 @@
+<?php 
+highlight_file(__FILE__); 
+ini_set("display_error", false);  
+error_reporting(0);  
+$str = isset($_GET['A_A'])?$_GET['A_A']:'A_A'; 
+if (strpos($_SERVER['QUERY_STRING'], "A_A") !==false) { 
+    echo 'A_A,have fun'; 
+} 
+elseif ($str<9999999999) { 
+    echo 'A_A,too small'."<br>"; 
+} 
+elseif ((string)$str>0) { 
+    echo 'A_A,too big'."<br>"; 
+} 
+else{ 
+    echo file_get_contents('flag.php');    
+} 
+ ?>

web/web_6/docker-compose.yml

@@ -0,0 +1,4 @@
+web:
+    build: .
+    ports:
+        - "80:80"

web/web_6/wirte-up.txt

@@ -0,0 +1 @@
+https://www.whj.website/blog/2018/08/22/%E4%B8%80%E9%81%93Web%E9%A2%98%E7%9B%AE/

web/web_7/Dockerfile

@@ -0,0 +1,4 @@
+FROM php:5.6-apache
+
+COPY /code /var/www/html/
+COPY /flag /

web/web_7/README.md

@@ -0,0 +1,2 @@
+## ctf极限利用 ##
+在安全客上面看到的一道题目，感觉挺好的。

web/web_7/code/flag.php

@@ -0,0 +1,8 @@
+<?php
+$FLAG = file_get_contents("/flag");
+
+function getFlag(){
+    global $FLAG;
+    echo $FLAG;
+}
+?>

web/web_7/code/index.php

@@ -0,0 +1,16 @@
+<?php
+include 'flag.php';
+if(isset($_GET['code'])){
+    $code = $_GET['code'];
+    if(strlen($code)>40){
+        die("Long.");
+    }
+    if(preg_match("/[A-Za-z0-9]+/",$code)){
+        die("NO.");
+    }
+    @eval($code);
+}else{
+    highlight_file(__FILE__);
+}
+//$hint =  "php function getFlag() to get flag";
+?>

web/web_7/docker-compose.yml

@@ -0,0 +1,4 @@
+web:
+    build: .
+    ports:
+        - "80:80"

web/web_7/flag

@@ -0,0 +1 @@
+flag{xxxx}

web/web_7/write-up.txt

@@ -0,0 +1 @@
+https://www.sh1llc0de.xyz/2018/08/18/2018-8-18-ctf_%E6%9E%81%E9%99%90%E5%88%A9%E7%94%A8/