kuolku/pikachu
0
1<?php2///**3// * Created by runner.han4// * There is nothing new under the sun5// */6 7 8ob_start();9 10if (!isset($PIKA_ROOT_DIR)){11 $PIKA_ROOT_DIR = '';12}13 14 15//$ACTIVE = array("active open","active","","","");16 17if (!isset($ACTIVE)){18 $SELF_PAGE = substr($_SERVER['PHP_SELF'],strrpos($_SERVER['PHP_SELF'],'/')+1);19 if ($SELF_PAGE = "index.php"){20 //22 title21 $ACTIVE = array("active open","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","","");22 23 }24}25?>26<!DOCTYPE html>27<html lang="en">28<head>29 <meta http-equiv="X-UA-Compatible" content="IE=edge,chrome=1" />30 <meta charset="utf-8" />31 <title>Get the pikachu</title>32 33 <meta name="description" content="overview & stats" />34 <meta name="viewport" content="width=device-width, initial-scale=1.0, maximum-scale=1.0" />35 36 <!-- bootstrap & fontawesome -->37 <link rel="stylesheet" href="<?php echo $PIKA_ROOT_DIR;?>assets/css/bootstrap.min.css" / >38 <link rel="stylesheet" href="<?php echo $PIKA_ROOT_DIR;?>assets/font-awesome/4.5.0/css/font-awesome.min.css" />39 40 <!-- page specific plugin styles -->41 42 <!-- text fonts -->43 <link rel="stylesheet" href="<?php echo $PIKA_ROOT_DIR;?>assets/css/fonts.googleapis.com.css" />44 45 <!-- ace styles -->46 <link rel="stylesheet" href="<?php echo $PIKA_ROOT_DIR;?>assets/css/ace.min.css" class="ace-main-stylesheet" id="main-ace-style" />47 48 <!--[if lte IE 9]>49 <link rel="stylesheet" href="<?php echo $PIKA_ROOT_DIR;?>assets/css/ace-part2.min.css" class="ace-main-stylesheet" />50 <![endif]-->51 <link rel="stylesheet" href="<?php echo $PIKA_ROOT_DIR;?>assets/css/ace-skins.min.css" />52 <link rel="stylesheet" href="<?php echo $PIKA_ROOT_DIR;?>assets/css/ace-rtl.min.css" />53 54 <!--[if lte IE 9]>55 <link rel="stylesheet" href="<?php echo $PIKA_ROOT_DIR;?>assets/css/ace-ie.min.css" />56 <![endif]-->57 58 <!-- inline styles related to this page -->59 60 <!-- ace settings handler -->61 <script src="<?php echo $PIKA_ROOT_DIR;?>assets/js/ace-extra.min.js"></script>62 63 <!-- HTML5shiv and Respond.js for IE8 to support HTML5 elements and media queries -->64 65 <!--[if lte IE 8]>66 <script src="<?php echo $PIKA_ROOT_DIR;?>assets/js/html5shiv.min.js"></script>67 <script src="<?php echo $PIKA_ROOT_DIR;?>assets/js/respond.min.js"></script>68 <![endif]-->69 <script src="<?php echo $PIKA_ROOT_DIR;?>assets/js/jquery-2.1.4.min.js"></script>70 <script src="<?php echo $PIKA_ROOT_DIR;?>assets/js/bootstrap.min.js"></script>71 72</head>73 74<body class="no-skin">75<div id="navbar" class="navbar navbar-default ace-save-state">76 <div class="navbar-container ace-save-state" id="navbar-container">77 78 <div class="navbar-header pull-left">79 <a href="<?php echo $PIKA_ROOT_DIR;?>index.php" class="navbar-brand">80 <small>81 <i class="fa fa-key"></i>82 Pikachu 漏洞练习平台 pika~pika~83 </small>84 </a>85 </div>86 87 <div class="navbar-buttons navbar-header pull-right" role="navigation">88 <ul class="nav ace-nav">89 90 <li class="light-blue dropdown-modal">91 <a data-toggle="dropdown" href="#" class="dropdown-toggle">92 <img class="nav-user-photo" src="<?php echo $PIKA_ROOT_DIR;?>assets/images/avatars/pikachu1.png" alt="Jason's Photo" />93 <span class="user-info">94 <small>欢迎</small>95 骚年96 </span>97 </a>98 99 </li>100 </ul>101 </div>102 </div><!-- /.navbar-container -->103</div>104 105<div class="main-container ace-save-state" id="main-container">106 <script type="text/javascript">107 try{ace.settings.loadState('main-container')}catch(e){}108 </script>109 110 111 <div id="sidebar" class="sidebar responsive ace-save-state">112 <script type="text/javascript">113 try{ace.settings.loadState('sidebar')}catch(e){}114 </script>115 116 <ul class="nav nav-list">117 <li class="<?php echo $ACTIVE[0];?>">118 <a href="<?php echo $PIKA_ROOT_DIR;?>index.php">119 <i class="ace-icon glyphicon glyphicon-tags"></i>120 <span class="menu-text"> 系统介绍 </span>121 </a>122 123 <b class="arrow"></b>124 </li>125 126 <li class="<?php echo $ACTIVE[1];?>">127 <a href="#" class="dropdown-toggle">128 <i class="ace-icon glyphicon glyphicon-lock"></i>129 <span class="menu-text">130 暴力破解131 </span>132 133 <b class="arrow fa fa-angle-down"></b>134 </a>135 136 <b class="arrow"></b>137 138 <ul class="submenu">139 <li class="<?php echo $ACTIVE[2];?>" >140 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/burteforce/burteforce.php">141 <i class="menu-icon fa fa-caret-right"></i>142 概述143 </a>144 145 <b class="arrow"></b>146 </li>147 <li class="<?php echo $ACTIVE[3];?>" >148 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/burteforce/bf_form.php">149 <i class="menu-icon fa fa-caret-right"></i>150 基于表单的暴力破解151 </a>152 153 <b class="arrow"></b>154 </li>155 156 <li class="<?php echo $ACTIVE[4];?>">157 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/burteforce/bf_server.php">158 <i class="menu-icon fa fa-caret-right"></i>159 验证码绕过(on server)160 </a>161 162 <b class="arrow"></b>163 </li>164 165 <li class="<?php echo $ACTIVE[5];?>">166 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/burteforce/bf_client.php">167 <i class="menu-icon fa fa-caret-right"></i>168 验证码绕过(on client)169 </a>170 171 <b class="arrow"></b>172 </li>173 174 <li class="<?php echo $ACTIVE[6];?>">175 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/burteforce/bf_token.php">176 <i class="menu-icon fa fa-caret-right"></i>177 token防爆破?178 </a>179 180 <b class="arrow"></b>181 </li>182 183 184<!-- <li class="--><?php //echo $ACTIVE[7];?><!--">-->185<!-- <a href="#" class="dropdown-toggle">-->186<!-- <i class="menu-icon fa fa-caret-right"></i>-->187<!---->188<!-- test-->189<!-- <b class="arrow fa fa-angle-down"></b>-->190<!-- </a>-->191<!---->192<!-- <b class="arrow"></b>-->193<!---->194<!-- <ul class="submenu">-->195<!-- <li class="--><?php //echo $ACTIVE[7];?><!--">-->196<!-- <a href="top-menu.html">-->197<!-- <i class="menu-icon fa fa-caret-right"></i>-->198<!-- test sun 01-->199<!-- </a>-->200<!---->201<!-- <b class="arrow"></b>-->202<!-- </li>-->203<!---->204<!-- </ul>-->205<!-- </li>-->206 207 208 209 210 </ul>211 </li>212 213 214 <li class="<?php echo $ACTIVE[7];?>">215 <a href="#" class="dropdown-toggle">216 <i class="ace-icon glyphicon glyphicon-indent-left"></i>217 <span class="menu-text">218 Cross-Site Scripting219 </span>220 <b class="arrow fa fa-angle-down"></b>221 </a>222 <b class="arrow"></b>223 <ul class="submenu">224 225 <li class="<?php echo $ACTIVE[8];?>" >226 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/xss/xss.php">227 <i class="menu-icon fa fa-caret-right"></i>228 概述229 </a>230 <b class="arrow"></b>231 </li>232 233 234 <li class="<?php echo $ACTIVE[9];?>" >235 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/xss/xss_reflected_get.php">236 <i class="menu-icon fa fa-caret-right"></i>237 反射型xss(get)238 </a>239 <b class="arrow"></b>240 </li>241 242 243 244 <li class="<?php echo $ACTIVE[10];?>" >245 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/xss/xsspost/post_login.php">246 <i class="menu-icon fa fa-caret-right"></i>247 反射型xss(post)248 </a>249 <b class="arrow"></b>250 </li>251 252 253 <li class="<?php echo $ACTIVE[11];?>" >254 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/xss/xss_stored.php">255 <i class="menu-icon fa fa-caret-right"></i>256 存储型xss257 </a>258 <b class="arrow"></b>259 </li>260 261 262 <li class="<?php echo $ACTIVE[12];?>" >263 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/xss/xss_dom.php">264 <i class="menu-icon fa fa-caret-right"></i>265 DOM型xss266 </a>267 <b class="arrow"></b>268 </li>269 270 <li class="<?php echo $ACTIVE[12];?>" >271 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/xss/xss_dom_x.php">272 <i class="menu-icon fa fa-caret-right"></i>273 DOM型xss-x274 </a>275 <b class="arrow"></b>276 </li>277 278 <li class="<?php echo $ACTIVE[13];?>" >279 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/xss/xssblind/xss_blind.php">280 <i class="menu-icon fa fa-caret-right"></i>281 xss之盲打282 </a>283 <b class="arrow"></b>284 </li>285 286 <li class="<?php echo $ACTIVE[14];?>" >287 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/xss/xss_01.php">288 <i class="menu-icon fa fa-caret-right"></i>289 xss之过滤290 </a>291 <b class="arrow"></b>292 </li>293 294 <li class="<?php echo $ACTIVE[15];?>" >295 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/xss/xss_02.php">296 <i class="menu-icon fa fa-caret-right"></i>297 xss之htmlspecialchars298 </a>299 <b class="arrow"></b>300 </li>301 302 303 <li class="<?php echo $ACTIVE[16];?>" >304 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/xss/xss_03.php">305 <i class="menu-icon fa fa-caret-right"></i>306 xss之href输出307 </a>308 <b class="arrow"></b>309 </li>310 311 312 <li class="<?php echo $ACTIVE[17];?>" >313 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/xss/xss_04.php">314 <i class="menu-icon fa fa-caret-right"></i>315 xss之js输出316 </a>317 <b class="arrow"></b>318 </li>319 </ul>320 </li>321 322 <li class="<?php echo $ACTIVE[25];?>">323 <a href="#" class="dropdown-toggle">324 <i class="ace-icon glyphicon glyphicon-share"></i>325 <span class="menu-text">326 CSRF327 </span>328 <b class="arrow fa fa-angle-down"></b>329 </a>330 <b class="arrow"></b>331 <ul class="submenu">332 333 <li class="<?php echo $ACTIVE[26];?>" >334 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/csrf/csrf.php">335 <i class="menu-icon fa fa-caret-right"></i>336 概述337 </a>338 <b class="arrow"></b>339 </li>340 341 342 <li class="<?php echo $ACTIVE[27];?>" >343 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/csrf/csrfget/csrf_get_login.php">344 <i class="menu-icon fa fa-caret-right"></i>345 CSRF(get)346 </a>347 <b class="arrow"></b>348 </li>349 350 <li class="<?php echo $ACTIVE[28];?>" >351 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/csrf/csrfpost/csrf_post_login.php">352 <i class="menu-icon fa fa-caret-right"></i>353 CSRF(post)354 </a>355 <b class="arrow"></b>356 </li>357 358 <li class="<?php echo $ACTIVE[29];?>" >359 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/csrf/csrftoken/token_get_login.php">360 <i class="menu-icon fa fa-caret-right"></i>361 CSRF Token362 </a>363 <b class="arrow"></b>364 </li>365 366 </ul>367 </li>368 369 370 <li class="<?php echo $ACTIVE[35];?>">371 <a href="#" class="dropdown-toggle">372 <i class="ace-icon fa fa-fighter-jet"></i>373 <span class="menu-text">374 SQL-Inject375 </span>376 <b class="arrow fa fa-angle-down"></b>377 </a>378 <b class="arrow"></b>379 <ul class="submenu">380 381 <li class="<?php echo $ACTIVE[36];?>" >382 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/sqli/sqli.php">383 <i class="menu-icon fa fa-caret-right"></i>384 概述385 </a>386 <b class="arrow"></b>387 </li>388 389 <li class="<?php echo $ACTIVE[37];?>" >390 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/sqli/sqli_id.php">391 <i class="menu-icon fa fa-caret-right"></i>392 数字型注入(post)393 </a>394 <b class="arrow"></b>395 </li>396 397 <li class="<?php echo $ACTIVE[38];?>" >398 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/sqli/sqli_str.php">399 <i class="menu-icon fa fa-caret-right"></i>400 字符型注入(get)401 </a>402 <b class="arrow"></b>403 </li>404 405 <li class="<?php echo $ACTIVE[39];?>" >406 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/sqli/sqli_search.php">407 <i class="menu-icon fa fa-caret-right"></i>408 搜索型注入409 </a>410 <b class="arrow"></b>411 </li>412 413 <li class="<?php echo $ACTIVE[40];?>" >414 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/sqli/sqli_x.php">415 <i class="menu-icon fa fa-caret-right"></i>416 xx型注入417 </a>418 <b class="arrow"></b>419 </li>420 421 <li class="<?php echo $ACTIVE[41];?>" >422 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/sqli/sqli_iu/sqli_login.php">423 <i class="menu-icon fa fa-caret-right"></i>424 "insert/update"注入425 </a>426 <b class="arrow"></b>427 </li>428 429 <li class="<?php echo $ACTIVE[42];?>" >430 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/sqli/sqli_del.php">431 <i class="menu-icon fa fa-caret-right"></i>432 "delete"注入433 </a>434 <b class="arrow"></b>435 </li>436 437 438 <li class="<?php echo $ACTIVE[43];?>" >439 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/sqli/sqli_header/sqli_header_login.php">440 <i class="menu-icon fa fa-caret-right"></i>441 "http header"注入442 </a>443 <b class="arrow"></b>444 </li>445 446 447 <li class="<?php echo $ACTIVE[44];?>" >448 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/sqli/sqli_blind_b.php">449 <i class="menu-icon fa fa-caret-right"></i>450 盲注(base on boolian)451 </a>452 <b class="arrow"></b>453 </li>454 455 <li class="<?php echo $ACTIVE[45];?>" >456 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/sqli/sqli_blind_t.php">457 <i class="menu-icon fa fa-caret-right"></i>458 盲注(base on time)459 </a>460 <b class="arrow"></b>461 </li>462 463 <li class="<?php echo $ACTIVE[46];?>" >464 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/sqli/sqli_widebyte.php">465 <i class="menu-icon fa fa-caret-right"></i>466 宽字节注入467 </a>468 <b class="arrow"></b>469 </li>470 </ul>471 </li>472 473 474 475 <li class="<?php echo $ACTIVE[50];?>">476 <a href="#" class="dropdown-toggle">477 <i class="ace-icon glyphicon glyphicon-pencil"></i>478 <span class="menu-text">479 RCE480 </span>481 <b class="arrow fa fa-angle-down"></b>482 </a>483 <b class="arrow"></b>484 <ul class="submenu">485 486 <li class="<?php echo $ACTIVE[51];?>" >487 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/rce/rce.php">488 <i class="menu-icon fa fa-caret-right"></i>489 概述490 </a>491 <b class="arrow"></b>492 </li>493 494 <li class="<?php echo $ACTIVE[52];?>" >495 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/rce/rce_ping.php">496 <i class="menu-icon fa fa-caret-right"></i>497 exec "ping"498 </a>499 <b class="arrow"></b>500 </li>501 502 <li class="<?php echo $ACTIVE[53];?>" >503 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/rce/rce_eval.php">504 <i class="menu-icon fa fa-caret-right"></i>505 exec "evel"506 </a>507 <b class="arrow"></b>508 </li>509 510 </ul>511 </li>512 513 <li class="<?php echo $ACTIVE[55];?>">514 <a href="#" class="dropdown-toggle">515 <i class="ace-icon glyphicon glyphicon-file"></i>516 <span class="menu-text">517 File Inclusion518 </span>519 <b class="arrow fa fa-angle-down"></b>520 </a>521 <b class="arrow"></b>522 <ul class="submenu">523 524 <li class="<?php echo $ACTIVE[56];?>" >525 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/fileinclude/fileinclude.php">526 <i class="menu-icon fa fa-caret-right"></i>527 概述528 </a>529 <b class="arrow"></b>530 </li>531 532 <li class="<?php echo $ACTIVE[57];?>" >533 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/fileinclude/fi_local.php">534 <i class="menu-icon fa fa-caret-right"></i>535 File Inclusion(local)536 </a>537 <b class="arrow"></b>538 </li>539 540 <li class="<?php echo $ACTIVE[58];?>" >541 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/fileinclude/fi_remote.php"">542 <i class="menu-icon fa fa-caret-right"></i>543 File Inclusion(remote)544 </a>545 <b class="arrow"></b>546 </li>547 548 </ul>549 </li>550 551 552 <li class="<?php echo $ACTIVE[60];?>">553 <a href="#" class="dropdown-toggle">554 <i class="ace-icon glyphicon glyphicon-download"></i>555 <span class="menu-text">556 Unsafe Filedownload557 </span>558 <b class="arrow fa fa-angle-down"></b>559 </a>560 <b class="arrow"></b>561 <ul class="submenu">562 563 <li class="<?php echo $ACTIVE[61];?>" >564 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/unsafedownload/unsafedownload.php">565 <i class="menu-icon fa fa-caret-right"></i>566 概述567 </a>568 <b class="arrow"></b>569 </li>570 571 <li class="<?php echo $ACTIVE[62];?>" >572 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/unsafedownload/down_nba.php">573 <i class="menu-icon fa fa-caret-right"></i>574 Unsafe Filedownload575 </a>576 <b class="arrow"></b>577 </li>578 579 </ul>580 </li>581 582 <li class="<?php echo $ACTIVE[65];?>">583 <a href="#" class="dropdown-toggle">584 <i class="ace-icon glyphicon glyphicon-upload"></i>585 <span class="menu-text">586 Unsafe Fileupload587 </span>588 <b class="arrow fa fa-angle-down"></b>589 </a>590 <b class="arrow"></b>591 <ul class="submenu">592 593 <li class="<?php echo $ACTIVE[66];?>" >594 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/unsafeupload/upload.php">595 <i class="menu-icon fa fa-caret-right"></i>596 概述597 </a>598 <b class="arrow"></b>599 </li>600 601 602 <li class="<?php echo $ACTIVE[67];?>" >603 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/unsafeupload/clientcheck.php">604 <i class="menu-icon fa fa-caret-right"></i>605 client check606 </a>607 <b class="arrow"></b>608 </li>609 610 <li class="<?php echo $ACTIVE[68];?>" >611 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/unsafeupload/servercheck.php">612 <i class="menu-icon fa fa-caret-right"></i>613 MIME type614 </a>615 <b class="arrow"></b>616 </li>617 618 <li class="<?php echo $ACTIVE[69];?>" >619 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/unsafeupload/getimagesize.php">620 <i class="menu-icon fa fa-caret-right"></i>621 getimagesize622 </a>623 <b class="arrow"></b>624 </li>625 626 </ul>627 </li>628 629 <li class="<?php echo $ACTIVE[73];?>">630 <a href="#" class="dropdown-toggle">631 <i class="ace-icon glyphicon glyphicon-text-height"></i>632 <span class="menu-text">633 Over Permission634 </span>635 <b class="arrow fa fa-angle-down"></b>636 </a>637 <b class="arrow"></b>638 <ul class="submenu">639 640 <li class="<?php echo $ACTIVE[74];?>" >641 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/overpermission/op.php">642 <i class="menu-icon fa fa-caret-right"></i>643 概述644 </a>645 <b class="arrow"></b>646 </li>647 648 <li class="<?php echo $ACTIVE[75];?>" >649 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/overpermission/op1/op1_login.php">650 <i class="menu-icon fa fa-caret-right"></i>651 水平越权652 </a>653 <b class="arrow"></b>654 </li>655 656 <li class="<?php echo $ACTIVE[76];?>" >657 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/overpermission/op2/op2_login.php">658 <i class="menu-icon fa fa-caret-right"></i>659 垂直越权660 </a>661 <b class="arrow"></b>662 </li>663 664 </ul>665 </li>666 667 668 <li class="<?php echo $ACTIVE[80];?>">669 <a href="#" class="dropdown-toggle">670 <i class="ace-icon glyphicon glyphicon-align-left"></i>671 <span class="menu-text">672 ../../673 </span>674 <b class="arrow fa fa-angle-down"></b>675 </a>676 <b class="arrow"></b>677 <ul class="submenu">678 679 <li class="<?php echo $ACTIVE[81];?>" >680 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/dir/dir.php">681 <i class="menu-icon fa fa-caret-right"></i>682 概述683 </a>684 <b class="arrow"></b>685 </li>686 687 <li class="<?php echo $ACTIVE[82];?>" >688 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/dir/dir_list.php">689 <i class="menu-icon fa fa-caret-right"></i>690 目录遍历691 </a>692 <b class="arrow"></b>693 </li>694 </ul>695 </li>696 697 698 <li class="<?php echo $ACTIVE[85];?>">699 <a href="#" class="dropdown-toggle">700 <i class="ace-icon glyphicon glyphicon-camera"></i>701 <span class="menu-text">702 敏感信息泄露703 </span>704 <b class="arrow fa fa-angle-down"></b>705 </a>706 <b class="arrow"></b>707 <ul class="submenu">708 709 <li class="<?php echo $ACTIVE[86];?>" >710 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/infoleak/infoleak.php">711 <i class="menu-icon fa fa-caret-right"></i>712 概述713 </a>714 <b class="arrow"></b>715 </li>716 717 718 <li class="<?php echo $ACTIVE[87];?>" >719 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/infoleak/findabc.php">720 <i class="menu-icon fa fa-caret-right"></i>721 IcanseeyourABC722 </a>723 <b class="arrow"></b>724 </li>725 726 727 </ul>728 </li>729 730 <li class="<?php echo $ACTIVE[90];?>">731 <a href="#" class="dropdown-toggle">732 <i class="ace-icon glyphicon glyphicon-align-left"></i>733 <span class="menu-text">734 PHP反序列化735 </span>736 <b class="arrow fa fa-angle-down"></b>737 </a>738 <b class="arrow"></b>739 <ul class="submenu">740 741 <li class="<?php echo $ACTIVE[91];?>" >742 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/unserilization/unserilization.php">743 <i class="menu-icon fa fa-caret-right"></i>744 概述745 </a>746 <b class="arrow"></b>747 </li>748 749 <li class="<?php echo $ACTIVE[92];?>" >750 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/unserilization/unser.php">751 <i class="menu-icon fa fa-caret-right"></i>752 PHP反序列化漏洞753 </a>754 <b class="arrow"></b>755 </li>756 757 </ul>758 </li>759 760 761 <li class="<?php echo $ACTIVE[95];?>">762 <a href="#" class="dropdown-toggle">763 <i class="ace-icon glyphicon glyphicon-flag"></i>764 <span class="menu-text">765 XXE766 </span>767 <b class="arrow fa fa-angle-down"></b>768 </a>769 <b class="arrow"></b>770 <ul class="submenu">771 772 <li class="<?php echo $ACTIVE[96];?>" >773 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/xxe/xxe.php">774 <i class="menu-icon fa fa-caret-right"></i>775 概述776 </a>777 <b class="arrow"></b>778 </li>779 780 <li class="<?php echo $ACTIVE[97];?>" >781 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/xxe/xxe_1.php">782 <i class="menu-icon fa fa-caret-right"></i>783 XXE漏洞784 </a>785 <b class="arrow"></b>786 </li>787 788 </ul>789 </li>790 791 <li class="<?php echo $ACTIVE[100];?>">792 <a href="#" class="dropdown-toggle">793 <i class="ace-icon glyphicon glyphicon-repeat"></i>794 <span class="menu-text">795 URL重定向796 </span>797 <b class="arrow fa fa-angle-down"></b>798 </a>799 <b class="arrow"></b>800 <ul class="submenu">801 802 <li class="<?php echo $ACTIVE[101];?>" >803 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/urlredirect/unsafere.php">804 <i class="menu-icon fa fa-caret-right"></i>805 概述806 </a>807 <b class="arrow"></b>808 </li>809 810 <li class="<?php echo $ACTIVE[102];?>" >811 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/urlredirect/urlredirect.php">812 <i class="menu-icon fa fa-caret-right"></i>813 不安全的URL跳转814 </a>815 <b class="arrow"></b>816 </li>817 818 </ul>819 </li>820 821 <li class="<?php echo $ACTIVE[105];?>">822 <a href="#" class="dropdown-toggle">823 <i class="ace-icon fa fa-exchange"></i>824 <span class="menu-text">825 SSRF826 </span>827 <b class="arrow fa fa-angle-down"></b>828 </a>829 <b class="arrow"></b>830 <ul class="submenu">831 832 <li class="<?php echo $ACTIVE[106];?>" >833 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/ssrf/ssrf.php">834 <i class="menu-icon fa fa-caret-right"></i>835 概述836 </a>837 <b class="arrow"></b>838 </li>839 840 <li class="<?php echo $ACTIVE[107];?>" >841 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/ssrf/ssrf_curl.php">842 <i class="menu-icon fa fa-caret-right"></i>843 SSRF(curl)844 </a>845 <b class="arrow"></b>846 </li>847 848 <li class="<?php echo $ACTIVE[108];?>" >849 <a href="<?php echo $PIKA_ROOT_DIR;?>vul/ssrf/ssrf_fgc.php">850 <i class="menu-icon fa fa-caret-right"></i>851 SSRF(file_get_content)852 </a>853 <b class="arrow"></b>854 </li>855 856 </ul>857 </li>858 859 860 861 862 <li class="<?php echo $ACTIVE[120];?>">863 <a href="#" class="dropdown-toggle">864 <i class="ace-icon glyphicon glyphicon-cog"></i>865 <span class="menu-text">866 管理工具867 </span>868 <b class="arrow fa fa-angle-down"></b>869 </a>870 <b class="arrow"></b>871 <ul class="submenu">872 873 <li class="<?php echo $ACTIVE[121];?>" >874 <a href="<?php echo $PIKA_ROOT_DIR;?>pkxss/index.php">875 <i class="menu-icon fa fa-caret-right"></i>876 XSS后台877 </a>878 <b class="arrow"></b>879 </li>880 881 882 883 </ul>884 </li>885 886 887 </ul><!-- /.nav-list -->888 889 <div class="sidebar-toggle sidebar-collapse" id="sidebar-collapse">890 <i id="sidebar-toggle-icon" class="ace-icon fa fa-angle-double-left ace-save-state" data-icon1="ace-icon fa fa-angle-double-left" data-icon2="ace-icon fa fa-angle-double-right"></i>891 </div>892 </div>893 894