2021DASCTF July X CBCTF 4th Nuclear wastewater学习记录

听完直播，这道题便豁然开朗
解压文件获得两个文件

其中flag.zip被加密，其密码应该是在这张二维码图片中，
扫描二维码，出现一个假的flag.
“很容易”发现二维码的每个地方的颜色不一样，推测这些颜色隐藏了密码信息
如下列出脚本以及编写思路：

#读入图片并获取二维码大小
from PIL import Image
img=Image.open('Nuclear wastewater.png')
x,y=img.size

#获取每单位二维码的颜色的RGB值装入list,剔除白色
list=[]
for i in range(0,x,10):
	for j in range(0,y,10):
		pixel=img.getpixel((i,j))
		if pixel==(255,255,255):
			continue
		r,g,b=pixel
		list.extend([r,g,b])
#剔除不可打印字符
list2=[]
for i in list:
	if i==0:
		continue
	if i<32 or i>127:
		continue
	list2.append(i)

#统计字符，并按字典值降序排序
from collections import Counter
cont=Counter(list2)
d_order=sorted(cont.items(),key=lambda x:x[1],reverse=True)

print(d_order)
#打印ascii码
for i,j in d_order:
	if j==1:
		continue
	print(chr(i),end='')

运行结果：theKEYis:#R@/&p~!
解压发现：

OIENKMAJOLEOKMAJOHECLHBCPGFDLNBIPAFFLPBKPIFNLEBBPPFKLFBAPEFBLJBMPHFCLEBBPMFJLEBBPLFOLHBCPCFHLNBIPDFGLHBCPPFKLIBNPHFCLDBGPGFDLBBEPPFKLHBCPPFKLMBJPDFGLCBHPHFCLBBEPIFNLNBIPOFLLMBJPDFGLBBEPEFBLBBEPPFKLGBDPOFLLABFPMFJLABFPCFHLNBIPDFGLMBJPEFBLIBNPHFCLLBOPOFLLBBEPIFNLDBGPAFFKAAFOPEKKDAGOGEDKJAMOAEFKLAOOIENLIBNPEFBLLBOPJFMLFBAPLFOLFBAPNFILEBBPLFOLFBAPAFFLJBMPHFCLJBMPBFELIBNPHFCLIBNPNFILBBEPPFKKPAKOHECKMAJOAEFKKAPOIENKFAAOLEOKHACOPEKKAAFOPEKKAAFOFEAKJAMOHECKLAOODEGKMAJOAEFKPAKONEIKBAEOIENKAAFODEGKAAFOPEKKLAOOOELKJAMOAEFKGADOFEAKEABOLEOKOALOLEOKJAMOAEFKIANOLEOKIANOEEBKFAAOHECKBAEOIENKJAMOKEPKMAJPMFJLCBHPEFBLNBI‌‍‌‌‌‍‍‌‎‌‍‌‍‌‌‌‍‌‎‎‎‍‌‍‎‎‌‌‍‎‍‌‎

一定要先复制到别的空文档里在解密
复制到WORD文档里
删除多余的符号即可解密

加密方式：Citrix CTX1

经过两次解密

附题目资源：
下载