当前位置:网站首页>xctf attack and defense world web master advanced area web2
xctf attack and defense world web master advanced area web2
2022-08-01 22:07:00 【l8947943】
0x01. 进入环境,查看问题
如图,给了一串代码:
0x02. 问题分析
可以很清楚的看到,The problem is to decipher the ciphertextok了.Mainly code auditing,先解释一下phpfunction meaning in :
strrev(string): 反转字符串
strlen(string): 返回字符串的长度
substr(string, start, length): 返回字符串的一部分
string: the desired string
start: where the string starts
length: 可选.规定被返回字符串的长度.默认是直到字符串的结尾
ord(string): Returns the first character of the string ASCII 值
chr(): 从指定的 ASCII 值返回对应的字符
str_rot13(string): 对字符串执行 ROT13 编码.
ROT13 编码把每一个字母在字母表中向前移动 13 个字母.数字和非字母字符保持不变
Both encoding and decoding are done by this function.If you take an encoded string as a parameter,then the original string will be returned
base64_encode(string): 使用 MIME base64 对数据进行编码.
进行反解密,Thrown into the online run:
<?php
$miwen="a1zLbgQsCESEIqRLwuQAyMwLyq2L5VwBxqGA3RQAyumZ0tmMvSGM2ZwB4tws";
$flag="";
$a = base64_decode(strrev(str_rot13($miwen)));
for($_0=0;$_0<strlen($a);$_0++){
$_c=substr($a,$_0,1);
$__=ord($_c)-1;
$_c=chr($__);
$flag=$flag.$_c;
}
$b = strrev($flag);
echo($b);
?>
into the online operating address:https://www.dooccn.com/php/
solve the final answer:flag:{NSCTF_b73d5adfb819c64603d7237fa0d52977}
边栏推荐
猜你喜欢
![[深入研究4G/5G/6G专题-48]: 5G Link Adaption链路自适应-4-下行链路自适应DLLA-PDCCH信道](/img/6b/d4ff120493e878fcf5c9aa728eced7.png)
[深入研究4G/5G/6G专题-48]: 5G Link Adaption链路自适应-4-下行链路自适应DLLA-PDCCH信道

scikit-learn no moudule named six

Advanced Algebra_Proof_The algebraic multiplicity of any eigenvalue of a matrix is greater than or equal to its geometric multiplicity

LeetCode952三部曲之一:解题思路和初级解法(137ms,超39%)

LeetCode952三部曲之二:小幅度优化(137ms -> 122ms,超39% -> 超51%)

Ten years after graduation, financial freedom: those things that are more important than hard work, no one will ever teach you

教你VSCode如何快速对齐代码、格式化代码

Postman 批量测试接口详细教程

User Experience | How to Measure User Experience?

求解多元多次方程解的个数
随机推荐
seaborn笔记:可视化统计关系(散点图、折线图)
小程序毕设作品之微信体育馆预约小程序毕业设计成品(3)后台功能
1. @Component注解的原理剖析
NgRx Selector 的 Memoization 特性学习笔记
Dichotomy Medium LeetCode6133. Maximum Number of Groups
How to prevent governance attacks in DAOs?
2022 版 MySQL 巅峰教程,收藏好,慢慢看
46.全排列
SAP Spartacus Accessibility E2E 端到端测试
入门数据库Days4
No more rolls!After joining ByteDance for a week, he ran decisively.
工程建筑行业数据中台指标分析
Centos7--MySQL的安装
number of solutions to solve a multivariate multi-degree equation
模拟数据之mockjs
Kubernetes第零篇:认识kubernetes
(*゚ヮ゚)*【精品C语言整理】*(゚ヮ゚*)女盆友缠着你让你教她写代码怎么办?安排,三万字博文带你走遍C语言,从此不再害怕编程
Mini Program--Independent Subcontracting & Subcontracting Pre-download
19 Lectures on Disassembly of Multi-merchant Mall System Functions - Invoice Management on the Platform
Raspberry Pi information display small screen, display time, IP address, CPU information, memory information (C language), four-wire i2c communication, 0.96-inch oled screen