当前位置:网站首页>Jarvis OJ shell流量分析
Jarvis OJ shell流量分析
2022-07-05 16:06:00 【[mzq]】
shell流量分析
题目附件 : https://dn.jarvisoj.com/challengefiles/+_+.rar.977e2c637dc492fb9a7cf7595c852044
使用strings 查找关键字 ctf 发现里面有一个python加解密脚本
用wireshark分析 tcp流中有加密解密的python2 脚本
还找到一串base64加密字符串,尝试解密得到乱码
猜测解密后用python 脚本解密
from Crypto import Random
from Crypto.Cipher import AES
import sys
import base64
def decrypt(encrypted, passphrase):
IV = encrypted[:16]
aes = AES.new(passphrase, AES.MODE_CBC, IV)
return aes.decrypt(encrypted[16:])
def encrypt(message, passphrase):
IV = message[:16]
length = 16
count = len(message)
padding = length - (count % length)
message = message + '\0' * padding
aes = AES.new(passphrase, AES.MODE_CBC, IV)
return aes.encrypt(message)
IV = 'YUFHJKVWEASDGQDH'
message = IV + 'flag is hctf{xxxxxxxxxxxxxxx}'
#print len(message)
#example = encrypt(message, 'Qq4wdrhhyEWe4qBF')
#print example
example = "mbZoEMrhAO0WWeugNjqNw3U6Tt2C+rwpgpbdWRZgfQI3MAh0sZ9qjnziUKkV90XhAOkIs/OXoYVw5uQDjVvgNA=="
example = base64.b64decode(example)
example = decrypt(example, 'Qq4wdrhhyEWe4qBF')
print example
flag is hctf{
n0w_U_w111_n0t_f1nd_me}
边栏推荐
- Win11 prompt: what if the software cannot be downloaded safely? Win11 cannot download software safely
- [es6] 模板字符串内添加if判断或添加三元运算符判断
- [es6] add if judgment or ternary operator judgment in the template string
- Desci: is decentralized science the new trend of Web3.0?
- 今日睡眠质量记录79分
- Relationship between objects and classes
- Global Data Center released DC brain system, enabling intelligent operation and management through science and technology
- 迁移/home分区
- The new version of effect editor is online! 3D rendering, labeling, and animation, this time an editor is enough
- The difference between searching forward index and inverted index
猜你喜欢
Use of set tag in SQL
【组队 PK 赛】本周任务已开启 | 答题挑战,夯实商品详情知识
The new version of effect editor is online! 3D rendering, labeling, and animation, this time an editor is enough
ES6 drill down - ES6 generator function
Use of RLOCK lock
Desci: is decentralized science the new trend of Web3.0?
迁移/home分区
为季前卡牌游戏 MotoGP Ignition Champions 做好准备!
Explain in detail the functions and underlying implementation logic of the groups sets statement in SQL
Seaborn绘制11个柱状图
随机推荐
用键盘输入一条命令
[deep learning] how does deep learning affect operations research?
【 brosser le titre 】 chemise culturelle de l'usine d'oies
How to set the WiFi password of the router on the computer
The new version of effect editor is online! 3D rendering, labeling, and animation, this time an editor is enough
单商户 V4.4,初心未变,实力依旧!
What is the difference between EDI license and ICP business license
Cartoon: what is the eight queens problem?
Sentinel flow guard
The database of the server is not connected to 200310060 "unknown error" [the service is up, the firewall is off, the port is on, and the netlent port is not connected]
数据湖(十四):Spark与Iceberg整合查询操作
Transaction rollback exception
10 minutes to help you get ZABBIX monitoring platform alarm pushed to nail group
一些认知的思考
漫画:什么是分布式事务?
Win11如何给应用换图标?Win11给应用换图标的方法
面对新的挑战,成为更好的自己--进击的技术er
10分钟帮你搞定Zabbix监控平台告警推送到钉钉群
Enter a command with the keyboard
Apple 已弃用 NavigationView,使用 NavigationStack 和 NavigationSplitView 实现 SwiftUI 导航