Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

function扫描方式下寻找目标函数无法准确解析所有语法 #17

Closed
LoRexxar opened this issue Aug 7, 2018 · 1 comment
Closed
Labels

Comments

@LoRexxar
Copy link
Owner

LoRexxar commented Aug 7, 2018

<?php

function read_file($li){
    return @file_get_contents($li);
}

function read_file2($li){
    return file_get_contents($li);
}


read_file(aaa($_GET['a']));
read_file2(aaa($_GET['a']));

因为敏感函数调用在return中,所以要找到漏洞函数,则需要分析当前行语句,然后解析寻找

@LoRexxar LoRexxar added the bug label Aug 7, 2018
@LoRexxar
Copy link
Owner Author

LoRexxar commented Aug 7, 2018

fix

@LoRexxar LoRexxar closed this as completed Aug 7, 2018
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

1 participant