西湖论剑misc之指鹿为马

  • A+
所属分类:逆向工程

点击蓝字 ·  关注我们

根据题目先进去


西湖论剑misc之指鹿为马

先输入1拿到题目的py脚本

在输入2 拿到两个图片的base64值

根据题目提示可知把两个图片用PS合成,再用给的脚本生成base64值

合成图片的base64

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

输入3 然后把合成图片的base64输入

西湖论剑misc之指鹿为马

返回一个base64值

复值解base64值解密

西湖论剑misc之指鹿为马



Base64转图片

import base64h = base64.b64decode('''图片的base64值''')f = open('flag.png','wb')f.write(h)f.close()

发现一个图片的base64,复制解密拿到flag图片

西湖论剑misc之指鹿为马


00

Tip

你是否想要加入一个安全团队
拥有更好的学习氛围?

那就加入EDI安全吧,这里门槛不是很高,但师傅们经验丰富,可以带着你一起从基础开始,只要你有持之以恒努力的决心,下一个CTF大牛就是你。

我们诚招Web、Pwn、Re、Crypto和Blockchain方向的师傅们,不论年龄、不论性别,EDI为大家提供一个共同学习,一同进步的平台。

我们在为打造安全圈好的技术氛围而努力,这里绝对是你学习技术的好地方。


有意向的师傅请联系我们的无剧师傅

西湖论剑misc之指鹿为马


EDI安全

西湖论剑misc之指鹿为马

扫二维码|关注我们

一个专注渗透实战经验分享的公众号


本文始发于微信公众号(EDI安全):西湖论剑misc之指鹿为马

发表评论

:?: :razz: :sad: :evil: :!: :smile: :oops: :grin: :eek: :shock: :???: :cool: :lol: :mad: :twisted: :roll: :wink: :idea: :arrow: :neutral: :cry: :mrgreen: