当前位置:网站首页>[MRCTF2020]Hello_misc
[MRCTF2020]Hello_misc
2022-07-30 04:30:00 【[mzq]】
语雀链接
After decompression found two files
flag.rar with password
try to restore it.png 使用zsteg查看发现 extradata:0有zip数据
提取zip数据zsteg try\ to\ restore\ it.png -E "extradata:0" > 1.zip
Open to find thiszipThe file also has a password,try to restore it.png There is another picture in this picture
Extract the output zsteg try\ to\ restore\ it.png -E "b1,r,lsb,xy" > out.png ,得到zip的密码
Unzip the first one extractedzip文件, 得到一个txt文件.
Convert these values to binary,Extract the first two digits,得到rar的解压密码 rar-passwd:0ac1fe6b77be5dbe
data = open("out.txt",'r').readlines()
res = ""
for i in data:
bin_data = bin(int(i.replace("\n",'')))[2::]
if len(bin_data) != 8:
bin_data = "0"*(8-len(bin_data)) + bin_data
else:
pass
res +=(bin_data[0:2])
for j in range(0,len(res),8):
print(chr(int(res[j:j+8],2)),end='')
解压flag.rar文件得到一个fffflag.zip,发现是docx文件,用pdf打开,修改字体颜色
base64Multi-line decryption,替换1is obtained for spacesflag : flag{He1Lo_mi5c~}
data = """MTEwMTEwMTExMTExMTEwMDExMTEwMTExMTExMTExMTExMTExMTExMTExMTExMTExMTAxMTEwMDAwMDAxMTExMTExMTExMDAxMTAx MTEwMTEwMTEwMDAxMTAxMDExMTEwMTExMTExMTExMTExMTExMTExMTExMTExMTExMTExMTAxMTExMTExMTExMTExMTEwMTEwMDEx MTEwMDAwMTAxMTEwMTExMDExMTEwMTExMTExMTAwMDExMTExMTExMTExMDAxMDAxMTAxMTEwMDAwMDExMTExMDAwMDExMTExMTEx MTEwMTEwMTAwMDAxMTExMDExMTEwMTExMTExMDExMTAxMTExMTExMTEwMTEwMTEwMTAxMTExMTExMTAwMTEwMTExMTExMTExMTEx MTEwMTEwMTAxMTExMTExMDExMTEwMTExMTAxMDExMTAxMTExMTExMTEwMTEwMTEwMTAxMTAxMTExMTAwMTEwMTExMTExMTExMTEx MTEwMTEwMTAwMDAxMTAwMDAwMTEwMDAwMDAxMTAwMDExMTAwMDAwMTEwMTEwMTEwMTAxMTEwMDAwMDAxMTExMDAwMDExMTExMTEx""".split('\n')
import base64
for i in data:
bindata = str(base64.b64decode(i)).replace('1',' ')
print(bindata)

边栏推荐
- Shell脚本基本编辑规范及变量
- Charles replaces the interface response information
- @ WebServlet annotations (Servlet annotations)
- What are Redis server startup after the operation?
- 恐造成下一个“千年虫”的闰秒,遭科技巨头们联合抵制
- cnpm installation steps
- 【线性表】- LeetCode力扣三道练习题详解
- 文件系统二
- 2022.7.29-----leetcode.593
- Discourse 自定义头部链接(Custom Header Links)
猜你喜欢

海外多家权威媒体热议波场TRON:为互联网去中心化奠定基础

MySql 怎么查出符合条件的最新的数据行?
![Reverse Theory Knowledge 3 [UI Modification]](/img/f3/33db96f3dd149658859be58041ab43.png)
Reverse Theory Knowledge 3 [UI Modification]

在麒麟V10操作系统上安装MySQL数据库

A brief introduction to the SSM framework

Database Design of Commodity Management System--SQL Server

共建共享数字世界的根:阿里云打造全面的云原生开源生态

How does MySql find out the latest data row that meets the conditions?

Go书籍大全-从初级到高级以及Web开发

WEB 渗透之信息收集
随机推荐
Charles 替换 接口响应信息
sqlmap use tutorial Daquan command Daquan (graphics)
cnpm安装步骤
Detailed transport layer
Notes on "The Law of Construction"---Chapter 10 Typical Users and Scenarios
Shanxi group (enterprises) in the second network security skills competition part problem WP (8)
golang中如何比较struct,slice,map是否相等以及几种对比方法的区别
使用EFR32作为Zigbee/Thread的sniffer的用法
SQL introduction of the first lecture -- MySQL 8.0.29 installation tutorial (Windows 64 - bit)
The 2nd Shanxi Province Network Security Skills Competition (Enterprise Group) Part of the WP (9)
WEB penetration of information collection
What are Redis server startup after the operation?
Reverse Analysis Practice 2
Thymeleaf简介
How to extract year, month and day data in date type in SQL Server
The VUX Datetime component compute-days-function dynamically sets the date list
GCC Rust获批将被纳入主线代码库,或将于GCC 13中与大家见面
state space representation
Roperties class configuration file & DOS to view the host network situation
【线性表】- LeetCode力扣三道练习题详解