当前位置:网站首页>Ctfhub eggs
Ctfhub eggs
2022-06-25 04:55:00 【Cn Sirius】
ctfhub Colored eggs
Tools Colored eggs
At first, the idea was that there were tools 8 page , I want to grab a bag and change it to see if there is page 9
I found that no matter which page limit All are 12 but offset in flux
therefore
Set the parameters like this
In the length of 1000 To 6、7 Double click any one of them Click response see Respond to package
On the last line
home page Colored eggs
api Two lines of words are hidden in the middle box
ctfhub{c18732f48a96c40d40a06e74b1305706}
Topic entry Colored eggs
stay web-ssrf Some questions in the middle column will appear when the parameters are wrong
For details, see ctfhub-ssrfpost The last line introduces
official account
A batch of eggs in the official account !
First, bind
Then order colored eggs
It prompts you to reply to the correct keywords
I *#@%
I replied
Colored eggs key word egg ctfhub CTFHub Here, take you CTFer One's own ……
What a surprise flag
Submission Colored eggs
Only the first half was found
In the title submission and wp At the end of the submission page
ctfhub{
029e02eb3a1
e8c49b1132b5
15b652a5f3a8
62013}
Finally, the rest of the egg was not found
After searching the Internet, I realized : thank anweilx Of wp
The first line is at the end of the two pages
The second line is the source code of the two pages Search separately Reward One on the top line is base64 Then turn url One is hex decode
The third line is the picture steganography of the two pages throw sth. into winhex
The fourth line has a hint
aes 256 ecb decode
Other colored eggs
The rest can be searched on the corresponding page egg You can get
边栏推荐
- JS, BOM, DOM (VI)
- 多睡觉,能减肥,芝加哥大学最新研究:每天多睡1小时,等于少吃一根炸鸡腿...
- [image fusion] image fusion based on MATLAB directional discrete cosine transform and principal component analysis [including Matlab source code 1907]
- Huawei Hongmeng development lesson 4
- 为什么TCP握手刚刚好是3次呢?
- Kotlin Compose 监听软键盘 点击enter提交事件
- JDBC (IV)
- 哪个编程语言实现hello world最烦琐?
- Coordinate system left multiply right multiply
- 在 .NET 6 中使用 dotnet format 格式化代码
猜你喜欢
![[image fusion] image fusion based on MATLAB directional discrete cosine transform and principal component analysis [including Matlab source code 1907]](/img/a1/f7a35a04e180e89d7f2fdbf89c1160.jpg)
[image fusion] image fusion based on MATLAB directional discrete cosine transform and principal component analysis [including Matlab source code 1907]

What if win11 Bluetooth fails to connect? Solution of win11 Bluetooth unable to connect

CSRF (Cross Site Request Forgery) &ssrf (server request forgery) (IV)

Ranorex Studio 10.1 Crack

Why does the SQL statement hit the index faster than it does not?

dotnet-exec 0.4.0 released

How micro engine uploads remote attachments

Successfully solved: selenium common. exceptions. TimeoutException: Message: timeout: Timed out receiving message from

"Daily practice, happy water" 1108 IP address invalidation

File upload vulnerability (III)
随机推荐
魔法猪系统重装大师怎么使用
成功解决:selenium.common.exceptions.TimeoutException: Message: timeout: Timed out receiving message from
Upgrade PHP to php7 The impact of X (2), the obsolescence of mcrypt decryption
哪个编程语言实现hello world最烦琐?
Abuse unlimited authorization -- is your address safe?
Precise delay based on Cortex-M3 and M4 (systick delay of system timer can be used for STM32, aducm4050, etc.)
Kotlin compose perfect todo project surface rendering background and shadow
Immutable learning road -- farewell to traditional copy
Chapter IX app project test (2) test tools
Bingbing's learning notes: implementation of circular queue
Opensea PHP development kit
buuctf(pwn)
多睡觉,能减肥,芝加哥大学最新研究:每天多睡1小时,等于少吃一根炸鸡腿...
PHP calls map API
[keil] GPIO output macro definition of aducm4050 official library
电脑的dwg文件怎么打开
Triangle class (construction and deconstruction)
Machine learning deep learning -- Vectorization
Laravel Vonage SMS sending
parallel recovery slave next change & parallel recovery push change