CTF babymips

最新推荐文章于 2024-04-21 21:00:00 发布

Azurexuoxi

最新推荐文章于 2024-04-21 21:00:00 发布

阅读量700

点赞数

分类专栏：信息安全

信息安全专栏收录该内容

5 篇文章 0 订阅

订阅专栏

mips逆向，源码如下：

#include <stdio.h>
#include <string.h>
char *check1="Q|j{g";
char *check2= "\x52\xfd\x16\xa4\x89\xbd\x92\x80\x13\x41\x54\xa0\x8d\x45\x18\x81\xde\xfc\x95\xf0\x16\x79\x1a\x15\x5b\x75\x1f";
void check(char *s){
	int i;
	for(i=5;i<strlen(s);i++){
		if(i%2)
			s[i]=(s[i]>>2)|((s[i]<<6)&0xff);
		else
			s[i]=((s[i]<<2)&0xff)|(s[i]>>6);	
	}
	if(!strncmp(&s[5],check2,27))
		printf("Right!\n");
	else
		printf("Wrong!\n");
}
void main(){
	char s[33];
	int i;
	printf("Give me your flag:");
	scanf("%32s",s);
	
	for(i=0;i<32;i++)
		s[i]^=(32-i);
	if(!strncmp(s,check1,5))
		check(s);
	else
		printf("Wrong\n");
}

所有逻辑可逆，直接写脚本跑

    flag = "qctf{"
    keys = [0x52, 0xFD, 0x16, 0xA4, 0x89, 0xBD, 0x92, 0x80,
    0x13, 0x41, 0x54, 0xA0, 0x8D, 0x45, 0x18, 0x81,  0xDE, 0xFC, 0x95, 0xF0, 0x16, 0x79, 0x1A, 0x15,
    0x5B, 0x75, 0x1F]
    print len(keys)
    for i in xrange(5,0x20):
    	for c in xrange(0,0x100):
    		fst = (c ^ ((0x20-i)))
    		if (i % 2) == 0:
    			res = ((fst << 2) % 0x100) | (fst >> 6)
    		else:
    			res = (fst >> 2) | ((fst << 6) % 0x100)
    		if (res == keys[i-5]):
    			flag += chr(c)
     
    print flag