冀信杯
这次靠队里的bin✌带飞,自己靠运气拿到了两道题misc,另一道misc题是队友出,没有web和密码的比赛。
misc
题目链接 https://pan.baidu.com/s/1bwWPhwxB4Z0NZiNMd-U01A?pwd=4i23
convert
- 题目
1 | 010100100110000101110010001000010001101000000111000000001100111110010000011100110000000000000000000011010000000000000000000000000000000000000000000000000000000011110111110000000111010000100000100100000010110000000000000011010000100100000000000000000101100100100010000000000000000000000010001111100110001101110000000110010000101001011001101100110100101000011101001100110000011100000000001000000000000000000000000000000110101101100101011110010010111001101010011100000110011100000000111100000001010010100011000110010001000000011101100100010001010100001000100100010111110010010000000101011110101011001011000000101110110011010000100000100010100010100000101110000110100010110100110100001000001010100000010111011011011000101000100000001000000101100000100010011010100101000100110110101010000010100000110110100110100010110011010000100110110010110000001011001100010001001101001010011010000101000100010101000000010001000111010010001000001000100000100110100101000000011101000001101100010101000001000101010001010000110001001100010000000100000100010011010101110111000110110000000101000010110101010001000000110000010100101101000001000000111011000101100000011101000100011011000000111000001111011100011110101100010001110111110001110011001110111101111100001100111100010011111011100100010011000100111100100110011001111110101010011111101110010011000100011100111100001001100010101111111001100010011101000111110101010011001100110101001110100010001111101000111111011111101010100111110000101010001000101010001010100010101000100010011010101010101111000010011000100010011100011111110100011000111111111011000000110100101010110110101011101011010010101110000000001101100101100000001101111110000101111000000011000111111101001110100101101011000101011001111100011011110110110111001100001010111000101110000000110101111000001100101000000100100000000011110000110011011110000000110001110010010100001100000101000000101001011101000110010000110100000111100000011100001100101110110100101011010000010100001111100000000010000000101001011001101110000101000110001101110010010100000001111100010100111110110001001110100011111000000101100010110110010001011011111101000111110000001011000101100010110110010001101000000110111111000110100000111100001001010111101100100010010101101000111110000001011000101100010110110010001111101011101000111110000001011000101101100100010101011001100110000000111001000000011111000000001101110000010011110100101100000011110000000001111011000000101110000000011001010000001010110000000010010000001101110100010110011001000000101001111110011001110001101000010101001101110001110010010101110000110010010100011000000001011101110010100111111111011100101101100010000001101111000000001111101111110110001100101010110000010101100101110011001111101101110000001010100000010011110101110100001010011111100110001111100000111001001010111110100001011100001011100100000100010111011100110000101110011110010100010000100100111111100011111000110000000001110010101010110000001010110010101000110001001011101011000000100111100010100010000011010110100100101110000011101010110110000100000001010011110101101100010100101000011000001010010001110010001011110000110111101110011110011000110101101001011011010110000001010010110110101111001010110111110100000111101001001100000110111010111001001000000101001101011011011000110110100011110010001111000001011110010001010011101100010001000111111100000101101111011110010010010001101010000101110100100010110000100110110110011011100111100101111001011101010100111100010110001011011100110111100001001010000111101101011011101001110000000110110001001010011010100111010001110010000101101111100000111101110101000101100001010110100000010110000001010000000111001111100011101010001111011010100111000101101100001011110011111110101100100100001100110101000101010001010001101111011111010010010100101010001100001010011011110110101111001100000011001011101100110101110000011000101110001110101010101010110110001101110011011110101100101111101011101110110110001100001011111011101110100110001001101010011111010111000101101010010011100110101101000110000111001010010110100100001101010101000001111100010011110111110001110010011101010111001000101111011000011110001010111110100111110000011100110101101011001100101010100010100001011111011010111111001001111000010111101111101000010011100001011010000100101001001010000011101110110101101101101010011110110000011011011101010111111111100000101010000101000010010111000111111111000111110001100011110111100101100010010100111101101001011010010100111010001110111001000011001110000101010011101100100100000101100011000001101000101100011010001101010010010000100010101010010010111100000100100111001100101111110001111100010010010010111011110100001101000010000101111001101000001000101111111111100010010000000100101011100010101111111011000000011010001111100100000001011000101101100100011100111111101110001101000111110010000000101100010110001011011001000111101011111111111011001000001111110001101001010101101101100011100110000101101001001001011110110000101101001000101011000111101101000000001010101000000001001001100110011001100010000011001100110010000100100010001100101100001101000011010000010010011010100110111001110111101001000011011100110110001101100011011111010101011010011011010011100111001001110110011111111010101101000001010000001100101111001111100011111000010100100010001001010010001100001010010000100100100001000011110011000010100011111011010011010111001001000000110011011000111011001011001010000100000101000110010011100101000101001101000110101010000010010100100101111011001000011011101000010110000000011000110100110010010000101111011000110111001111011101001001101001000011110100011011101011000011111011010110000011011100100110011111100011110100110000000011101000010010000001011001000001010110100001110000110010000100000000110000001110100000110000011111001011101100011111110000000000010000010000101110101001001100001100100000110110010101000111110111110110001111010000110001100000000111001100010011001011001110110000000100100110100001101010011011000001000101001001111011010010100101110110000101110101100001110011000000110001000011100110010001100100011000100110001000010101010101111110000010101011100000001100010011101000110010110100110110101100110110001010101000011001111010011101011111000111100010000100001001110110001110110001101100000011000101011101001100010010100001111011011011101100011101111011010100001100000101011011011111001000100010010111110000000111011110000010001011111100110101001001111000011110111010101011010101101000101110101101010001100100011111010111011010111111011001011011001101001100110110100010011010100111001001111010101011101101110101011001010111010110000101100101011010010110110110000101100010011000110110010001100101110111011110111100011001100110101000001011011000001101001000001101110011011110111000001111000011110010010001011110100111101101111100001001001111101100000111110001001000010010000101100001101000011111100010111100011010001011100011001110010111000110111100110010001110111001101111001110111001111100100101110101001001001110010100111010101100101011001011010010111100110001110110011110110101001110110011110100111111010000010100001101000101010001110100111111011111111100000111100001101010001111000101111000111010100110101010101011101111001101010111110110000111100111101100011111010001011001010110011111101001001001110111000101110011011101011110101011110101110111011101111000010100101111111100000011111101111100000111111000011111000111000010001010111111001011000011110100001100011001110011110011100000111000011011111011100011001010110111100111010110010000111001111010101110011110101100011000100010001100101011000110011000100111101111010000001010000111010001011100001110011110101100011001111010011001010100010111110001000000111101110110110100111010000100010110000100100111011110110110110011110110011100100100001101000100001101001011011000001011111011010100000101101010110111001111010101010001001101100101111010010100010110111111110100001100011011111111110101000111111101001111000110101000001011001001111010111100100111001111111000110001100110110011000000011011100001111100100100001100000011101011001110100111000000001110000001100001011000011010001111001001010000000001101011111111111110101100110101010100011101010001000010010110110100000101001011010111001111011010001111100000110010111011001110001001001001010110001010001001100110100101010111011111010101110110111111111001010100100110101100111101001110010100101100111110000111011111101010001100101100000111101001011101010111100011011100101111110010001010011101001011000001110000101101101001000111110111000110101010110000111011000010011001111111001110110100011001111110101010010001110011101010011110010000110000011101000101001100101010000001000010000011000110101110111010100101101001101010110010011101110001011101110001010011010101100010101100111011001110011100010011111010111111011110100100011110100011110101111011010110000111000100011000001100101101111100110000110111010101010111001001010001101001111101100011110101110110101101100001110000101000101101000010100001010100001110000101110001001010111100001101011001010110110011010000110011110110010010101101111010101011010111110010010001010110101101011101101010001011111101010011001001100100100011001101111011010111000100110001001011010001100011000110010001110001010010010001110010010100100111001000000101001011001010001101011011111001011100011011101010100001101011111100000101101110100110101001101000100110010000011011011000111100001101011001101001011100111010010000100110100010010110001110000011110000000110110010011011100000111000101011010001010101010101110110101000101100111000101011011110011001110101111010100101001101001010011010000001001101100100011110111000100100001000100011100110111010010010001001101101101011001101011000011100010111111111111011101101010100000111110001101110111010001001110111111000100101001110000100011100101001110001101010100100100010011101010101111011000001010000001100100001111011110000011000101001001010001011010101110011110111100110011010100111010001100000100101001010001011010100000101001110011000010100011001001011001101000101000111110000010110100101001100000001110001101010000010011001011101101110101101011110010011111100011000011110100100001110111001000001000101110111101100011001000000000111000110000111110110001011110011110100110011110111100101000101001101010011100010000110100101001101101101011010100001001011011010000010000101111110001101101101110100011100100010010101101110011000100101111010100111011110110001011101010111111101101011011000010010000001101111101111000110111100111100010100100011011110100010011111101101111000101001101010110100100000111000001011001010100101100000010001011000110011011000101011001001110010101110010011110111011011100111111110111001000100010101011100111111110011100100010111100100101001101101101011000011001000011110110011111100101011111001001000010101000001110100010101011100111011110110110111000100010011110011011111110001001001100110100100110101111011101101110010000110111010111110111010010100001000100110010001111111101001111101100100010000011011010010010011000100101101001001011000110111101100111011010001000101010110010011110101001110100110110001011111100010010011110100010110000101100010100011111000011101011110011000010011110111101101001000101101111110101100001110011101110111101011001111101110111101110001000111000011110110000111101110111101010110100111101101000101011000011011000001000110001100001110011111000001111011010011001101001100100010010010011011111110011101010011100100001011111011100001111100011111001000101001011001001011100100110100000000001011100000111110011001011101101011011111011000100010111100101100110011101110110000101010011001010110100100100010110010011110111011111011101011010100011010110001111111100100100001110100111111011111111100001100100011000100110111000100111000011101101101111110000111011101010001101111011011010011001110000110111101010111001100011000111100000100101110001011010000010011110000000111110101101000100011001001011111010110110011010100101000101010011100001010000111010111110110110011011110111110111001010001010110000100110110011000110000111100001010000111010010010101000000011100110111010001110001111000101010011110100011011010101110010011000110101010010101001100110110110100110100111010100100001100101011101001101011000001100010000011111100011010110110110001101010001100100000111010110101111010111000010101000100100010011000010100100110010101111010101011110001001010010110010100010101100011100000010100010011100111000000100100010011011011100010110111111110101011101001110110001110110110010000001001000011100001011110110000101001001011110001010010111011111101010100100001001000011000100001111101000001010011101010110101010111000110110001011011000001111110010000001010011111111000111110101110100110110101001100101011101110001110100010110011110110110100101100110110101100000001110101101110101100011001011101000100001000010111001001110100100001010110011111101101110110011100100101111011100010001111010011001110110011110010011111100100011000111000100000101111011011010010000001110001010110111000110000101001100010101100001000110101101011001000100001011100101001010100000011000110011000110010001011001001010000011011000100101110000001011000011101101101010010111101001011001000110100011010001100011100011110001001010110111111000001001001011001011111000010100000000010100010010100110100100000111110110110100011110110111010010011111000111100111110111011110010111110111011110001100101000111000110101100000000011010100011001001000100001101011101111010111010000000001010011111111101111111110100110101111101100110111111001000000101010001010110100101011010001111110111101110101101010001111011010001100110000110110010110100001011001010100000110111000000111000010000111111101110100100110001101111100110011011101100110010100101110010110101000111101011100111110010000101000101000111001100001111111100010000000001011100100101110010101110011101011111111010000100000011100101110101110110110110110100011001100011110011000100011010001010101011010011111111010101011110011011110111100000001001001000001011001100010011100111010101010100100110101000101000001111011111111111010010010101010010101110010111000100101110110111111001010001101100010011000100010001001101000010100011001001110010001101100110111000111111100111110111111010001101000100111001111110111101010010111010101100100010001011111010000011111100111100111000110011010111011110101001111001000011101011101000001010110110000010110101100111000001010001010110010000001011001000011110110010011010011111100001111011011010010111000011110100111011001011001110010110001111001101001010110100101101001111011011100010101011000100100011011110001001010100100101001111010000111101001101001100001000011100001111111100101001100000110100010111111111001010100111001010010100100111010111011011111101111001000111000111000000111010111001110111010100001101100011010100011101010011111100111111011001001101010011011011001111110111101101010110110110110010111111010100101111000001101110111011001010000011001001001101110000111001000011001100100001010011011111111001001001110111101100111010001011001010110000111011100100111001110101101001010111101010011001101010001110101100101001000111010011000011101110100110001011000001100010010011100011110111101100100101111101110011011110011001010110111100111010110011001101101110101111101110010100001100101011000011000111110110001101101010001010001010111000000101100110111011100011011001111111000111101100101101101101000001001111111100011110110100101010001010010001101010010100100111000010000010011111110100101101100111010100100011001010101101111110000110111110001110001010111000100111011000101011110100000010100001110001001111010000011111010001101101000011110000000101110110010101001110111000000000101001110101001011010111100110010010111110000001000101110101010100000111011101011000010111100010010110111011111101000001001111001111000011110101100101101010011001010100011011110110011001011100001011111000110100111000101110000001000110110000111010011010101111110101100011101010111000110110110110110000111111010111101110101000111101101001010101111001110000110111001101100100100111101100000111010001100011011101111010010011100001010011001000011100000110011011101100001110011011100011111001101001001001111111010001100110101000101110110001110100100100100000100101010001000111101010100000111011001100101110001100100011111110000111010101110111100011110101110001111001011010010001111001110011111011000000111110110101110000110000110111110010000010011101000011100110111011101000111110000010110000001101111110011101100001001100101010011001110000010101110000110000111101110110101011001110111101101110100101010111111001101111110111010100001110011101100000100001001011110011001100110100001110111001011101001010000110001110110111101111101011111000110000001011110101010000001111000011000101011000101001110111101000110001111100000110011110000000010010111100010101000101110101100001110111000110011111111100000000110111111011010110011110111011001101110000110111110010011000111101111100001000101010000101110010010011101110111001111111110011100011011011101110110001100010110101000001010011100000101010101000011000011100101001110110000011001011011101101101101001100101101010100100100110110100100111001111011110010100011001111010001001101010101101100100110000000100110101100110110010001110000110010101000011100000110101001100111111010111011000001101101101111001000001110010011001101100110110111000110110000111000100100010011101010001000100001001011010000000000010101001100110110001000111100000001100000101110100111100011100011010000011010011101101110111100111010001011110101001000010000011001100000000010111111110010101111111011011110011010101101001100111101011101011010111101001111010000011111100100000011000100010111011010111110000000100001111000111110101000001110101000000011111001111110011110101000100011010010011100110101101101000101011111101101011010100110011111011111010011111111000000000101000101000111101001110111111100010101101011010110000110011100011101000000011111000001110001110110000100011110011111101001000010000101000011101100111101101011011010011100011101011010001110101111110110111011000101111011011000010110001101100011110011010100110010011100100100111100111001100001110010100010010110011000111111010001100110000110000010101110000100111001110100010010000001111011001110010100110110000111011011101011011001111010010110001000110011001011011011110011110100011110010100100001111001011111101111101000100100110011000001011010111010000001100101010101011000111011010111100000110111111100101011001011100011011000110010011000100101010100011100110101111011000011001011010010001001100111000110101100100001111011101011110001001110000010100001010001100101010101110010011100010010001000111110010011000011011101111111010100000010010010111111100110110010101110110011111111101011110100110000010100011110110110011101000010101001010101111110000110100011100001101110100100110001001111111101101010110100111111010111101101011110001110101111010001011101110100101110110010010100000001101010101011101001011000110001011111000011111100111001011111011011010011000110001011011000000001111011101111010111010101111111111100111010011011111111010000011000010001100011110110010111111110010100011000100001111010111101100000000010000000000011100000000 |
- 解析
一堆二进制
放到赛博厨子
得到一个文件,解压得到一张图片,放到随波逐流没东西
然后看属性,属性里面有base64编码
解码得flag
1 | flag{01a25ea3fd6349c6e635a1d0196e75fb} |
注了什么
- 题目
给了个流量包
按照正常顺序,先ctrl+F5搜索一下flag,搜不到,然后协议分级,流追踪,发现在sql布尔注入(没发现也没关系,浏览会发现变化的数字在ascii码范围内,就会顿悟这是在利用回显不同来爆破正确字符)。
导出相关流,放在文件夹中方便看
直接在导出界面阅读即可(小tip 可以看着下面图红框地方确认回显)
找到和flag相关的文件名后,看每一个变化的数字,转ascii得到flag
- exp
1 | flag = '' |
- flag
1 | flag{skysql_is_very_cool!233} |
JACK
- 题目
给了434个txt,里面有中文和类似base64的编码
- 解析
用exp来导出内容后,在txt中将重复的中文替换成空白,剩下都是编码,搜索一下,以等号结尾的编码,好像只有base家族,先看看有没有flag,用逆向思维,搜索flag的base编码 Zmxh
,得到flag
- exp
1 | import os |
- flag
1 | flag{01a25ea3fd6349c6e635a1d0196e75fb} |