> For the complete documentation index, see [llms.txt](https://gitbook-88.gitbook.io/ctf-writeup/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://gitbook-88.gitbook.io/ctf-writeup/2021/2021-qiang-wang-bei/xun-bao.md).

# 寻宝

KEY1是几个有关PHP弱类型比较的考点，number3要爆破，只是很简单的md5，总体来说比较容易，队友的exp：

```
ppp[number1]=11111aaaa&ppp[number2]=2e10&ppp[number3]=xxxx&ppp[number4]=0e00001&ppp[number5]={ 'bar': 'baz' }
```

KEY2有119M的docx，其中有个文件里有flag