攻防世界 Misc 3-1

1.wireshark分析

• winhex查看文件发现是压缩包
• 解压后winhex查看文件发现是数据流
• 打开数据包，分析六，能获得一个压缩包、 python代码、base64
  

19aaFYsQQKr+hVX6hl2smAUQ5a767TsULEUebWSajEo=

# coding:utf-8

__author__ = 'YFP'

from Crypto import Random

from Crypto.Cipher import AES

import sys

import base64

IV = 'QWERTYUIOPASDFGH'

def decrypt(encrypted):
    aes = AES.new(IV, AES.MODE_CBC, IV)

    return aes.decrypt(encrypted)


def encrypt(message):
    length = 16
    count = len(message)
    padding = length - (count % length)
    message = message + '\0' * padding

    aes = AES.new(IV, AES.MODE_CBC, IV)

    return aes.encrypt(message)


str = 'this is a test'

example = encrypt(str)

print(decrypt(example))
s=‘19aaFYsQQKr+hVX6hl2smAUQ5a767TsULEUebWSajEo=‘
flag=base64.b64decode(s)
print(decrypt(flag))

• 密码就是No_One_Can_Decrypt_Me，用它打开flag.rar就能得到flag了