ISCTF2024新生赛Misc部分WP_isctf misc

2401_84263282

于 2024-06-24 19:21:29 发布

阅读量937

点赞数 9

文章标签： c# 网络开发语言

本文链接：https://blog.csdn.net/2401_84263282/article/details/139935874

版权

ISCTF2023新生赛部分WP

- MISC：
  - - - 签到：
        你说爱我？尊嘟假嘟：
        小蓝鲨的秘密：
        easy_zip:
        杰伦可是流量明星：
        蓝鲨的福利：
        Ez_misc:
        spalshes：
        PNG的基本食用:
        小猫：
        MCSOG-猫猫：
        镜流:
        stream：
        一心不可二用：
        小白小黑:
        张万森,下雪了：
        ezUSB：
        EZcrc:
        Beyond Hex, Meet Heptadecimal：
        DISK:
        Wonderful New World:

MISC：

签到：

给的是分开的图片拼一下即可。

在线拼图：https://fulicat.com/lab/pintu/

PS：图片我就不放了，二维码过不了审

在这里插入图片描述

ISCTF{W3lcom3_7O_2023ISCTF&BlueShark}

你说爱我？尊嘟假嘟：

zip没后缀放入010 PK头直接修改后缀解压一个word文档开始以为是二进制啥的替换

后面想到了是Ook码刚好三段进行尝试！！

你说爱我  Ook.
尊嘟  Ook! 
假嘟 Ook?

在线Ook编码：https://www.splitbrain.org/services/ook

在这里插入图片描述

ild3l4pXejwPcCwJsPAOq7sJczdRdTsJcCEUsP1Z  #base64换表解码

在这里插入图片描述

ISCTF{9832h-s92hw-23u7w-2j8s0}

小蓝鲨的秘密：

在这里插入图片描述

放入010 发现存在伪加密09 改为00 （收尾都要改不然打不开呢！）

在这里插入图片描述

可爱的小蓝鲨不知道这个字符串是什么，强大的你，你能告诉小蓝鲨吗？

U2FsdGVkX1/ij5Hxtt6G8tDvbXIQcMLJ6isLpLmxqxW8mOmFIB4DgBGXSR3ceEcj

这里crc爆破修改宽高可以直接攻击梭哈也可以手动得到密码：15CTF2023

在这里插入图片描述

AES在线解密：http://www.esjson.com/aesEncrypt.html

在这里插入图片描述

ISCTF{2832-3910-232-3742-7320}

easy_zip:

直接ARCHPR 直接爆破得到密码：011865

在这里插入图片描述

ISCTF{b04c3d02-16e9-4735-b5d9-f0ad31fa2853}

杰伦可是流量明星：

得到一个压缩包进行解压，得到login.mp3看到音频尝试工具Audacity 无果

放入010 发现存在wireshark 特征修改后缀进行分析直接筛选http协议，搜到flag，url解码

在这里插入图片描述

ISCTF{wddhr836459_83}

蓝鲨的福利：

添加文件头 89 50 4E 47 修改png后缀，确实是福利题！！

在这里插入图片描述

ISCTF{blueshark_welcome_you}

Ez_misc:

在这里插入图片描述
ppt里面最后一张下面有密码：M13c_!ps2s23

在这里插入图片描述
图片打不开放入010观察发现没有头和尾进行添加得到原图，发现里面能看到二维码进行扫码。

FF D8 FF E0
FF D9

在这里插入图片描述

PS：二维码过不了审，直接贴结果把！！

在这里插入图片描述

ISCTF{5e093f8a-6b8c-4fa5-b9f7-0ae3b6b0da56}

spalshes：

在这里插入图片描述

解压flag.zip 加密的进行爆破得到密码：895736 解压得到二维码，扫码得到flag。

在这里插入图片描述
PS：不能放二维码，图片过不了审核！

在这里插入图片描述

ISCTF{8374-su23-9s7e-237s-js65-55sg}

PNG的基本食用:

在这里插入图片描述

part1：
crc爆破宽高01改08

在这里插入图片描述

part3: 直接放入010 尾部有拼接即可。

在这里插入图片描述

ISCTF{png-is-for-you}

小猫：

binwalk -e 或者foremost 分离得到一张图片发现没东西，然后尝试这张图进行LSB隐写查看

使用工具Stegsolve在红色3通道发现一串数组提取，猜测是核心价值观编码然后进行数组替换

在这里插入图片描述

脚本如下：

key = [['富强','自由' ,'爱国'],['民主', '平等' ,'敬业'] ,['文明','公正','诚信'],['和谐','法治','友善']]
wdf = [ (3,2),(3,2),(3,2),(3,3),(3,1),(3,2),(2,1),
            (3,2),(4,2),(4,2),(3,3),(2,1),(3,2),(2,1),
            (3,2),(4,1),(3,2),(2,1),(4,1),(2,1),(4,1),
            (2,3),(4,1),(2,2),(3,2),(3,2),(3,2),(1,2),
            (4,1),(4,1),(3,2),(1,2),(4,1),(1,1),(3,2),
            (3,2),(4,1),(3,1),(4,1),(4,1),(4,1),(2,3),
            (4,1),(3,1),(4,1),(2,2),(4,1),(1,2),(4,1),
            (1,3),(3,2),(1,2),(4,1),(1,1),(4,1),(3,1),
            (4,1),(2,3),(4,1),(4,2),(4,1),(3,2),(4,1),
            (4,2),(3,2),(1,2),(3,2),(3,1),(3,2),(3,2),
            (4,1),(4,2),(4,1),(3,2),(4,1),(3,2),(4,2),
            (4,3),(4,2)]
for i in wdf:
    x = i[0]-1
    y = i[1]-1
    print(key[x][y],end='')

公正公正公正诚信文明公正民主公正法治法治诚信民主公正民主公正和谐公正民主和谐民主和谐敬业和谐平等公正公正公正自由和谐和谐公正自由和谐富强公正公正和谐文明和谐和谐和谐敬业和谐文明和谐平等和谐自由和谐爱国公正自由和谐富强和谐文明和谐敬业和谐法治和谐公正和谐法治公正自由公正文明公正公正和谐法治和谐公正和谐公正法治友善法治

在线核心价值观解码：http://anhao.tlrkl.top/hxjzg.html

在这里插入图片描述

flag{aca195fd3d0f2392548d029767dbf766}

MCSOG-猫猫：

PS:猫猫说的话带有一大段意义不明的东西，试试在linux下用vim看看？

在这里插入图片描述

在这里插入图片描述
在线0宽字节解密：https://www.mzy0.com/ctftools/zerowidth1/

在这里插入图片描述

ISCTF{[o]F0o0.LliI_Bu_D4Ng_r3N}

镜流:

在这里插入图片描述
爆破得到密码：306256
hint：把图片缩小10倍

在这里插入图片描述
把图片缩小10倍
发现图片有很多像素点，写个脚本缩小10倍：

在这里插入图片描述

脚本如下：

from PIL import Image
 
img = Image.open('1new.png')
w = img.width
h = img.height
img_obj = Image.new("RGB",(w//10,h//10))
 
for x in range(w//10):
    for y in range(h//10):
        (r,g,b)=img.getpixel((x\*10,y\*10))
        img_obj.putpixel((x,y),(r,g,b))
 
img_obj.save('ok.png')

在这里插入图片描述

zsteg ok.png

在这里插入图片描述

ISCTF{JINGLIU_IS_SO_COOL}

stream：

把数据包关键信息提取出来，然后在写个脚本即可。

在这里插入图片描述

a=[32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,32,33,32,33,34,35,36,37,38,39,40,41,42,43,44,45,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,32,33,34,35,36,37,38,39,40,41,42,43,44,45,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,32,33,34,35,36,37,38,39,40,41,42,43,44,45,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,32,33,34,35,36,37,38,39,40,41,42,43,44,45,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,32,33,34,35,36,37,38,39,40,41,42,43,44,45,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,32,33,32,33,32,33,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59,60,61,62,63,64,65,66,67,68,69,70,71,72,73,74,75,76,77,78,79,80,81,82,83,84,85,86,87,88,89,90,91,92,93,94,95,96,97,98,99,100,101,102,103,104,105,106,107,108,109,110,111,112,113,114,115,116,117,118,119,120,121,122,123,124,125,126,127,32,33,34,35,36,37,38,39,40,41,42,43,44,45,46,47,48,49,50,51,52,53,54,55,56,57,58,59]
 
for i in range(len(a)):
    #print( a[i] %a[i+1])
    q=a[i]
    w=a[i+1]
    if q>w:
        print(chr(a[i]),end="")

在这里插入图片描述

ISCTF{0ops!-Y0u-F1nd-Th3-S3cret-flag!!!}

一心不可二用：

小辉边敲代码边玩游戏，敲了两行代码就报错了，真的比彬彬还逊！

使用foremost提取在/res/drawble/下面发现了flag.zip 发现需要密码

PS：可以kali中grep 这样方便!!

百度一下发现报错猜测SyntaxError 为密码 🆗输入得到flag。

在这里插入图片描述

flag{Err0R_is_no7_ex1ste9}

小白小黑:

在这里插入图片描述

看数据长度为256*256就知道是画图，然后生成二维码，写个脚本如下：

from PIL import Image
# 创建一个256x256的灰度图像
img = Image.new('L', (256, 256))

# 打开文件并读取数据
with open('黑白.txt', 'r', encoding='utf-8') as f:
    data = f.readlines()

# 遍历图像的每一个像素
for i in range(256):
    for j in range(256):# 从数据中获取像素值并转换为整数
        pixel_value = int(data[j][i])
        img.putpixel((j, i), pixel_value)

# 保存图像
img.save('1.png')

在这里插入图片描述
得到一张图黑色看不出来，其实里面有二维码通过工具Stegsolve 我是在绿色通道看到比较明显的二维码（不放二维码了过不了审核）我这里QR扫不到你们可以通过在线网站，我直接手机扫出了

在这里插入图片描述

ISCTF{3a151409-1351-4e32-a5f5-74a89fa29699}

张万森,下雪了：

加个后缀zip 得到一个包和dic.txt（很明显是字典，直接爆破）得到密码:blueSHARK666

在这里插入图片描述

tip.txt 有点像Base64尝试解码。

在这里插入图片描述
词频分析在解一下得到密码：ISCTFZ023

在这里插入图片描述

这个flag.txt 有flag提交不对，有特殊空格，猜测为snow隐写上工具

Snow隐写工具：https://darkside.com.au/snow/

在这里插入图片描述

ISCTF{34da-a87s-sk87-s384-3982-398233}

ezUSB：

source2.5.1到host主机这是键盘流量

在这里插入图片描述
"Handle Value Notification"是蓝牙属性协议（ATT）的一部分。它是蓝牙低功耗（BLE）通信中使用的操作码。句柄是BLE设备的GATT（通用属性配置文件）中特性或描述符的唯一标识符。

在这里插入图片描述

(usb.src == "2.4.2") && (btatt.handle == 0x001b)
这个usb.src==多少多少这个过滤条件挺好的

稍微随便处理一下：

蓝牙的放前面，键盘的放后面
且到这个是数组算的6位和第8位
0000001500000000000000
0000001900000000000000
010000390000000000000000000000000000000000000000000000000000000000000000
0102002d0000000000000000000000000000000000000000000000000000000000000000

在这里插入图片描述

normalKeys = {
 
    "04": "a", "05": "b", "06": "c", "07": "d", "08": "e",
    "09": "f", "0a": "g", "0b": "h", "0c": "i", "0d": "j",
    "0e": "k", "0f": "l", "10": "m", "11": "n", "12": "o",
    "13": "p", "14": "q", "15": "r", "16": "s", "17": "t",
    "18": "u", "19": "v", "1a": "w", "1b": "x", "1c": "y",
    "1d": "z", "1e": "1", "1f": "2", "20": "3", "21": "4",
    "22": "5", "23": "6", "24": "7", "25": "8", "26": "9",
    "27": "0", "28": "<RET>", "29": "<ESC>", "2a": "<DEL>", "2b": "\t",
    "2c": "<SPACE>", "2d": "-", "2e": "=", "2f": "[", "30": "]", "31": "\\",
    "32": "<NON>", "33": ";", "34": "'", "35": "<GA>", "36": ",", "37": ".",
    "38": "/", "39": "<CAP>", "3a": "<F1>", "3b": "<F2>", "3c": "<F3>", "3d": "<F4>",
    "3e": "<F5>", "3f": "<F6>", "40": "<F7>", "41": "<F8>", "42": "<F9>", "43": "<F10>",
    "44": "<F11>", "45": "<F12>"}
shiftKeys = {
 
    "04": "A", "05": "B", "06": "C", "07": "D", "08": "E",
    "09": "F", "0a": "G", "0b": "H", "0c": "I", "0d": "J",
    "0e": "K", "0f": "L", "10": "M", "11": "N", "12": "O",
    "13": "P", "14": "Q", "15": "R", "16": "S", "17": "T",
    "18": "U", "19": "V", "1a": "W", "1b": "X", "1c": "Y",
    "1d": "Z", "1e": "!", "1f": "@", "20": "#", "21": "$",
    "22": "%", "23": "^", "24": "&", "25": "\*", "26": "(", "27": ")",
    "28": "<RET>", "29": "<ESC>", "2a": "<DEL>", "2b": "\t", "2c": "<SPACE>",
    "2d": "\_", "2e": "+", "2f": "{", "30": "}", "31": "|", "32": "<NON>", "33": "\"",
    "34": ":", "35": "<GA>", "36": "<", "37": ">", "38": "?", "39": "<CAP>", "3a": "<F1>",
    "3b": "<F2>", "3c": "<F3>", "3d": "<F4>", "3e": "<F5>", "3f": "<F6>", "40": "<F7>",
    "41": "<F8>", "42": "<F9>", "43": "<F10>", "44": "<F11>", "45": "<F12>"}
output = []
keys = open('lanya.txt')
for line in keys:
    try:


### 给大家的福利


**零基础入门**


对于从来没有接触过网络安全的同学，我们帮你准备了详细的学习成长路线图。可以说是最科学最系统的学习路线，大家跟着这个大的方向学习准没问题。


![](https://img-blog.csdnimg.cn/img_convert/95608e9062782d28f4f04f821405d99a.png)


同时每个成长路线对应的板块都有配套的视频提供：


![在这里插入图片描述](https://img-blog.csdnimg.cn/direct/a91b9e8100834e9291cfcf1695d8cd42.png#pic_center)


因篇幅有限，仅展示部分资料