CTF 内涵的软件 stage1

雨点打透心脏的1/2处 2022-12-11 15:02 92阅读 0赞

### 文章目录 ###

*   *   *  一、内涵的软件
         *  二、stage1

### 一、内涵的软件 ###

**题目描述：** 图片有内涵，exe也可以有内涵，也许你等不到答案，赶快行动起来吧！！！(答案为flag\{\}形式，提交\{\}内内容即可)  
**题目附件：** 附件1

1、附件1

链接：[https://pan.baidu.com/s/1BzQc84cvoE0rA7pddlQrDw ][https_pan.baidu.com_s_1BzQc84cvoE0rA7pddlQrDw]  
提取码：pxxw

**2、文件**

![在这里插入图片描述][20201008000003192.png_pic_center]  
**3、用逆向工具包打开程序查看源代码—>ollydbg**

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center]

**4、打开**

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center 1]  
**5、文件名—>打开**  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center 2]

**6、慢慢找**

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center 3]

**7、OK**

DBAPP\{49d3c93df25caad81232130f3d2ebfad\}

49d3c93df25caad81232130f3d2ebfad

### 二、stage1 ###

**难度系数：** ★★  
**题目来源：** XCTF 3rd-GCTF-2017  
**题目附件：** 附件1

**1、附件1**

链接：[https://pan.baidu.com/s/1FoDs-U4c-Ac5mjTpXmn\_Mw ][https_pan.baidu.com_s_1FoDs-U4c-Ac5mjTpXmn_Mw]  
提取码：thyl

**2、文件**

![在这里插入图片描述][20201002232839724.png_pic_center]

**3、用进 Stegsolve打开**

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center 4]

然后出现了二维码

**4、微信扫一扫**

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center 5]  
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

**5、放入 WinHext 中，发现如下信息，将文件保存为.pyc 格式**

5.1 Edit—>Clipboard Data—>Paste Into New File

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center 6]  
5.2 ASCII Hex—>OK  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center 7]

5.3 之后，提示是.pyt 文件—>是 python文件的编译文件，保存为 666.pyc 文件  
![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center 8]  
**6、反编译**

在线工具：[https://tool.lu/pyc/][https_tool.lu_pyc]

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center 9]  
**7、获得python脚本代码**

str = [65,108, 112,104,97,76,97,98]
    flag = ''
    for i in str:
        flag += chr(i)
    print(flag)

**8、 python 环境运行得到flag**

![在这里插入图片描述][watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center 10]  
**9、OK**

AlphaLab

[https_pan.baidu.com_s_1BzQc84cvoE0rA7pddlQrDw]: https://pan.baidu.com/s/1BzQc84cvoE0rA7pddlQrDw
[20201008000003192.png_pic_center]: /images/20221123/50f3d2f3fd334437b0787794a345e49a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center]: /images/20221123/2ed3874bf3c947fbab974f18fbf4bf53.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center 1]: /images/20221123/c4c6c681569344d59019bbd44a3308d1.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center 2]: /images/20221123/72fa5b8dca624a0a91ffb80ab4499419.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center 3]: /images/20221123/c4e67d51051c483787996b6cad14500f.png
[https_pan.baidu.com_s_1FoDs-U4c-Ac5mjTpXmn_Mw]: https://pan.baidu.com/s/1FoDs-U4c-Ac5mjTpXmn_Mw
[20201002232839724.png_pic_center]: /images/20221123/204b83f1c2774b4ca5367fde36e903b4.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center 4]: /images/20221123/aa954c05d7134d49bc38319d603461de.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center 5]: /images/20221123/1bdab81e5d1c45eebdd9eaf95b01cbe7.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center 6]: /images/20221123/403f857ac3454784bb2669374ef1c620.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center 7]: /images/20221123/75a2a44f7bb24525ab319dcfeb37975a.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center 8]: /images/20221123/845fe5abc6df437587fe0171ce36ca0c.png
[https_tool.lu_pyc]: https://tool.lu/pyc/
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center 9]: /images/20221123/9613d95bec4d43669437df3fe73e8a11.png
[watermark_type_ZmFuZ3poZW5naGVpdGk_shadow_10_text_aHR0cHM6Ly9ibG9nLmNzZG4ubmV0L0hZRDY5Ng_size_16_color_FFFFFF_t_70_pic_center 10]: /images/20221123/8fa2ecc953aa4895b5183567f282e1f6.png