hgame2022-week1

最新推荐文章于 2023-10-31 15:18:20 发布
最新推荐文章于 2023-10-31 15:18:20 发布
阅读量4.3k 收藏 1
点赞数 1
分类专栏： ctf 文章标签： 网络安全
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。
本文链接：https://blog.csdn.net/qq_73734019/article/details/128690690
版权

目录

web

Classic Childhood Game

Become A Member

Show Me Your Beauty

Guess Who I Am

crypto

RSA

神秘的电话

misc

e99p1ant_want_girlfriend

Sign In

神秘的海报

Where am I

Reverse

test your IDA

easyasm

Pwn

test_nc

web

Classic Childhood Game

游戏题，一般都是跟js文件有关

ctrl + u

一个个看js文件，发现这个文件里面就是游戏一关关的剧情

打开js跳到最后，看到一串字符，有关就是通关之后出flag的字符了

Become A Member

http的知识

改UA头为Cute_Bunny

cookie：code=Vidar

Referer:

 josn格式post

hgame{H0w_ArE_Y0u_T0day?}

Show Me Your Beauty

一开始尝试pht文件可以上传成功，但是连antsward返回数据为空

大小写绕过

连antsward

虚拟终端catflag

hgame{Unsave_F1L5_SYS7em_UPL0ad!}

Guess Who I Am

总结：

题目不难，锻炼了一波写python脚本

看源码得到hint

得到杭电的战队信息

手打了几下

应该要答对一定次数才能get flag

bp抓包看看

发现存在3个请求

  • api/getScore
  • api/getQuestion
  • api/verifyAnswer
  • 分别用来获取分数、获取intro信息、提交答案，三次请求作为一次完整的过程，且session相同
  • python测试一下看看返回的具体信息

返回json格式数据

下面就是写一个脚本

思路：将github上面的信息存入一个列表，发送请求（api/getQuestion）先获取题目，在表中检索题目，然后将id发到 api/verifyAnswer 验证，最后api/getScore接收分数和flag

 exp:

import requests
#战队信息字典
answer =  [
    {
        "id": "ba1van4",
        "intro": "21级 / 不会Re / 不会美工 / 活在梦里 / 喜欢做不会的事情 / ◼◻粉",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=kSt5er0OQMXROy28nzTia0A&s=640",
        "url": "https://ba1van4.icu"
    },
    {
        "id": "yolande",
        "intro": "21级 / 非常菜的密码手 / 很懒的摸鱼爱好者，有点呆，想学点别的但是一直开摆",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=rY328VIqDc7lNtujYic8JxA&s=640",
        "url": "https://y01and3.github.io/"
    },
    {
        "id": "t0hka",
        "intro": "21级 / 日常自闭的Re手",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=EYNwm1PQe8o5OcghFb4zfw&s=640",
        "url": "https://blog.t0hka.top/"
    },
    {
        "id": "h4kuy4",
        "intro": "21级 / 菜鸡pwn手 / 又菜又爱摆",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=BmACniaibVb6IL6LiaYF4Uvlw&s=640",
        "url": "https://hakuya.work"
    },
    {
        "id": "kabuto",
        "intro": "21级web / cat../../../../f*",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=oPn2ez6Nq12GqPZG6cV7nw&s=640",
        "url": "https://www.bilibili.com/video/BV1GJ411x7h7/"
    },
    {
        "id": "R1esbyfe",
        "intro": "21级 / 爱好歪脖 / 究极咸鱼一条 / 热爱幻想 / 喜欢窥屏水群",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=FLyUHP6nYov19gA0ia83u8Q&s=640",
        "url": "https://r1esbyfe.top/"
    },
    {
        "id": "tr0uble",
        "intro": "21级 / 喜欢肝原神的密码手",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=bgcib3gBjJGdKEf7BZ512Uw&s=640",
        "url": "https://clingm.top"
    },
    {
        "id": "Roam",
        "intro": "21级 / 入门级crypto",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=5wzr9TVyw2nxOz5Jb7ceaQ&s=640",
        "url": "#"
    },
    {
        "id": "Potat0",
        "intro": "20级 / 摆烂网管 / DN42爱好者",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=NicTy1CDqeHsgzbZEIUU2wg&s=640",
        "url": "https://potat0.cc/"
    },
    {
        "id": "Summer",
        "intro": "20级 / 歪脖手 / 想学运维 / 发呆业务爱好者",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=4y6zxTBSB3cbseeyPvQWng&s=640",
        "url": "https://blog.m1dsummer.top"
    },
    {
        "id": "chuj",
        "intro": "20级 / 已退休不再参与大多数赛事 / 不好好学习，生活中就会多出许多魔法和奇迹",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=aM4tJSQSxB5gcauIMDEtUg&s=640",
        "url": "https://cjovi.icu"
    },
    {
        "id": "4nsw3r",
        "intro": "20级会长 / re / 不会pwn",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=j3LOiav9IluKSYg1VEibblZw&s=640",
        "url": "https://4nsw3r.top/"
    },
    {
        "id": "4ctue",
        "intro": "20级 / 可能是IOT的MISC手 / 可能是美工 / 废物晚期",
        "avatar":  ("../../images/avatar/4ctue.jpg"),
        "url": "#"
    },
    {
        "id": "0wl",
        "intro": "20级 / Re手 / 菜",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=06FRYslcuprt59OxibicdhqQ&s=640",
        "url": "https://0wl-alt.github.io"
    },
    {
        "id": "At0m",
        "intro": "20级 / web / 想学iot",
        "avatar":  ("../../images/avatar/at0m.png"),
        "url": "https://homeboyc.cn/"
    },
    {
        "id": "ChenMoFeiJin",
        "intro": "20级 / Crypto / 摸鱼学代师",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=5xyCaLib3lovjrUzf5pWxDQ&s=640",
        "url": "https://chenmofeijin.top"
    },
    {
        "id": "Klrin",
        "intro": "20级 / WEB / 菜的抠脚 / 想学GO",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=nnzEWNwxMS88jKYre5fOjg&s=640",
        "url": "https://blog.mjclouds.com/"
    },
    {
        "id": "ek1ng",
        "intro": "20级 / Web / 还在努力",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=pJFuHEqNaFk1If1STvRibWw&s=640",
        "url": "https://ek1ng.com"
    },
    {
        "id": "latt1ce",
        "intro": "20级 / Crypto&BlockChain / Plz V me 50 eth",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=EmPiaz7Msgg7iaia9tibibjdUyw&s=640",
        "url": "https://lee-tc.github.io/"
    },
    {
        "id": "Ac4ae0",
        "intro": "*级 / 被拐卖来接盘的格子 / 不可以乱涂乱画哦",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=EI7A02PYs5WUVFP2bciad8w&s=640",
        "url": "https://twitter.com/LAttic1ng"
    },
    {
        "id": "Akira",
        "intro": "19级 / 不会web / 半吊子运维 / 今天您漏油了吗",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=ku1vqyI1hLJr61PGIlic7Ow&s=640",
        "url": "https://4kr.top"
    },
    {
        "id": "qz",
        "intro": "19级 / 摸鱼美工 / 学习图形学、渲染ing",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=q5qVDcvyzxee4qiays52mibA&s=640",
        "url": "https://fl0.top/"
    },
    {
        "id": "Liki4",
        "intro": "19级 / 脖子笔直歪脖手",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=E3j3BJrsAfyl1arfnFKufQ&s=640",
        "url": "https://github.com/Liki4"
    },
    {
        "id": "0x4qE",
        "intro": "19级 / </p><p>Web",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=K7icYial1VVzlNl7hrD9MlNw&s=640",
        "url": "https://github.com/0x4qE"
    },
    {
        "id": "xi4oyu",
        "intro": "19级 / 骨瘦如柴的胖手",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=JfeMY6Lz5ZU4GmtTV85otQ&s=640",
        "url": "https://www.xi4oyu.top/"
    },
    {
        "id": "R3n0",
        "intro": "19级 / bin底层选手",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=icY08gnMlXtoYIJ9ib3eJQ2g&s=640",
        "url": "https://r3n0.top"
    },
    {
        "id": "m140",
        "intro": "19级 / 不会re / dl萌新 / 太弱小了，没有力量 / 想学游戏",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=zt0iccbnGuV8dOpXIYrJgvg&s=640",
        "url": "#"
    },
    {
        "id": "Mezone",
        "intro": "19级 / 普通的binary爱好者。",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=rDD29iahzzg8AvQX7fdbFPg&s=640",
        "url": "#"
    },
    {
        "id": "d1gg12",
        "intro": "19级 / 游戏开发 / 🐟粉",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=icawQKtjLcRiaj7scTRBZ9Qw&s=640",
        "url": "https://d1g.club"
    },
    {
        "id": "Trotsky",
        "intro": "19级 / 半个全栈 / 安卓摸🐟 / P 社玩家 / 🍆粉",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=LiasEshjTXTrNzJjPHVY3Vw&s=640",
        "url": "https://altonhe.github.io/"
    },
    {
        "id": "Gamison",
        "intro": "19级 / 挖坑不填的web选手",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=0VaAu2go9mvrMXu1ibmKy1g&s=640",
        "url": "http://aw.gamison.top"
    },
    {
        "id": "Tinmix",
        "intro": "19级会长 / DL爱好者 / web苦手",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=L2EclrAltb7lk3LBPY6oWA&s=640",
        "url": "http://poi.ac"
    },
    {
        "id": "RT",
        "intro": "19级 / Re手，我手呢？",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=p1TD1qwKfEK8NZExRDqic1A&s=640",
        "url": "https://wr-web.github.io"
    },
    {
        "id": "wenzhuan",
        "intro": "18 级 / 完全不会安全 / 一个做设计的鸽子美工 / 天天画表情包",
        "avatar":  ("../../images/avatar/wenzhuan.jpg"),
        "url": "https://wzyxv1n.top/"
    },
    {
        "id": "Cosmos",
        "intro": "18级 / 莫得灵魂的开发 / 茄粉 / 作豚 /  米厨",

        "avatar":  ("../../images/avatar/cosmos.jpg"),
        "url": "https://cosmos.red"
    },
    {
        "id": "Y",
        "intro": "18 级 / Bin / Win / 电竞缺乏视力 / 开发太菜 / 只会 C / CSGO 白给选手",
        "avatar":  ("../../images/avatar/Y.jpg"),
        "url": "https://blog.xyzz.ml:444/"
    },
    {
        "id": "Annevi",
        "intro": "18级 / 会点开发的退休web手 / 想学挖洞 / 混吃等死",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=WN9x96MpjSJ3Gc7a3SHtDw&s=640",
        "url": "https://annevi.cn"
    },
    {
        "id": "logong",
        "intro": "18 级 / 求大佬带我IoT入门 / web太难了只能做做misc维持生计 / 摸🐟",
        "avatar":  ("../../images/avatar/logong.jpg"),
        "url": "http://logong.vip"
    },
    {
        "id": "Kevin",
        "intro": "18 级 / Web / 车万",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=jaXAqywDMbia39e4OfGXicPQ&s=640",
        "url": "https://harmless.blue/"
    },
    {
        "id": "LurkNoi",
        "intro": "18级 / 会一丢丢crypto / 摸鱼",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=CLTlN5QPS3aI60icIoxGmdQ&s=640",
        "url": "#"
    },
    {
        "id": "幼稚园",
        "intro": "18级会长 / 二进制安全 /  干拉",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=G2o7mX9RCTkiaCHeEiaJLBwA&s=640",
        "url": "https://danisjiang.com"
    },
    {
        "id": "lostflower",
        "intro": "18级 / 游戏引擎开发 / 尚有梦想的game maker",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=eQHtN69C2tgM8Ul8PmtTKw&s=640",
        "url": "https://r000setta.github.io"
    },
    {
        "id": "Roc826",
        "intro": "18 级 / Web 底层选手",
        "avatar":  ("../../images/avatar/Roc826.jpg"),
        "url": "http://www.roc826.cn/"
    },
    {
        "id": "Seadom",
        "intro": "18 级 / Web / 真·菜到超乎想象 / 拼死学（mo）习（yu）中",
        "avatar":  ("../../images/avatar/seadom.png"),
        "url": "#"
    },
    {
        "id": "ObjectNotFound",
        "intro": "18级 / 懂点Web & Misc / 懂点运维 / 正在懂游戏引擎 / 我们联合！",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=yQnkF86Uy6UkZrZmFYLL4g&s=640",
        "url": "https://www.zhouweitong.site"
    },
    {
        "id": "Moesang",
        "intro": "18 级 / 不擅长 Web / 擅长摸鱼 / 摸鱼！",
        "avatar":  ("../../images/avatar/Moesang.png"),
        "url": "https://blog.wz22.cc"
    },
    {
        "id": "E99p1ant",
        "intro": "18级 / 囊地鼠饲养员 / 写了一个叫 Cardinal 的平台",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=AJQ9RJRCavhSibMZtRq2JOQ&s=640",
        "url": "https://github.red/"
    },
    {
        "id": "Michael",
        "intro": "18 级 / Java / 会除我佬",
        "avatar":  ("../../images/avatar/Michael.jpg"),
        "url": "http://michaelsblog.top/"
    },
    {
        "id": "matrixtang",
        "intro": "18级 / 编译器工程师( 伪 / 半吊子PL- 静态分析方向",
        "avatar":  ("../../images/avatar/MATRIX.jpg"),
        "url": "#"
    },
    {
        "id": "r4u",
        "intro": "18级 / 不可以摸🐠哦",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=rJCqQv1EzicpDW77nMa5bYw&s=640",
        "url": "http://r4u.top/"
    },
    {
        "id": "357",
        "intro": "18级 / 并不会web / 端茶送水选手",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=POaV9Y85NiaUcibaETEKTpfw&s=640",
        "url": "#"
    },
    {
        "id": "Li4n0",
        "intro": "17 级 / Web 安全爱好者 / 半个程序员 / 没有女朋友",
        "avatar":  ("../../images/avatar/li4no.jpg"),
        "url": "https://blog.0e1.top"
    },
    {
        "id": "迟原静",
        "intro": "17级 / Focus on Java Security",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=xyVPFvQ2dWReoBiahd7naSw&s=640",
        "url": "#"
    },
    {
        "id": "Ch1p",
        "intro": "17 级 / 自称 Bin 手实际啥都不会 / 二次元安全",
        "avatar":  ("../../images/avatar/Chip.jpg"),
        "url": "http://ch1p.top"
    },
    {
        "id": "f1rry",
        "intro": "17 级 / Web",
        "avatar":  ("../../images/avatar/f1rry.png"),
        "url": "#"
    },
    {
        "id": "mian",
        "intro": "17 级 / 业余开发 / 专业摸鱼",
        "avatar":  ("../../images/avatar/mian.jpg"),
        "url": "https://www.intmian.com"
    },
    {
        "id": "ACce1er4t0r",
        "intro": "17级 / 摸鱼ctfer / 依旧在尝试入门bin / 菜鸡研究生+1",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=gRBlwiawx1lF4UkPKh4Liczg&s=640",
        "url": "#"
    },
    {
        "id": "MiGo",
        "intro": "17级 / 二战人 / 老二次元 / 兴趣驱动生活",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=XzZggL7hDeicLXb2FSic6sfg&s=640",
        "url": "https://migoooo.github.io/"
    },
    {
        "id": "BrownFly",
        "intro": "17级 / RedTeamer / 字节跳动安全工程师",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=EnNslsFelj9HibuKoNHwmyg&s=640",
        "url": "https://brownfly.github.io"
    },
    {
        "id": "Aris",
        "intro": "17级/ Key厨 / 腾讯玄武倒水的",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=anjeaJmx1X79Yp1DNxWrRA&s=640",
        "url": "https://blog.ar1s.top"
    },
    {
        "id": "hsiaoxychen",
        "intro": "17级 / 游戏厂打工仔 / 来深圳找我快活",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=YGiaicyZ3NkWfOoGOlLPWvAw&s=640",
        "url": "https://chenxy.me"
    },
    {
        "id": "Lou00",
        "intro": "17级 / web / 东南读研",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=fdAMuUicvOObMv3eZC8y0Ew&s=640",
        "url": "https://blog.lou00.top"
    },
    {
        "id": "Junier",
        "intro": "16 级 / 立志学术的统计er / R / 为楼上的脱单事业做出了贡献",
        "avatar":  ("../../images/avatar/Junier.jpg"),
        "url": "#"
    },
    {
        "id": "bigmud",
        "intro": "16 级会长 / Web 后端 / 会一点点 Web 安全 / 会一丢丢二进制",
        "avatar":  ("../../images/avatar/bigmud.jpg"),
        "url": "#"
    },
    {
        "id": "NeverMoes",
        "intro": "16 级 / Java 福娃 / 上班 996 / 下班 669",
        "avatar":  ("../../images/avatar/nervermoes.jpg"),
        "url": "#"
    },
    {
        "id": "Sora",
        "intro": "16 级 / Web Developer",
        "avatar":  ("../../images/avatar/Sora.jpg"),
        "url": "https://github.com/Last-Order"
    },
    {
        "id": "fantasyqt",
        "intro": "16 级 / 可能会运维 / 摸鱼选手",
        "avatar":  ("../../images/avatar/fantasyqt.jpg"),
        "url": "http://0x2f.xyz"
    },
    {
        "id": "vvv_347",
        "intro": "16 级 / Rev / Windows / Freelancer",
        "avatar":  ("../../images/avatar/vvv_347.png"),
        "url": "https://vvv-347.space"
    },
    {
        "id": "veritas501",
        "intro": "16 级 / Bin / 被迫研狗",
        "avatar":  ("../../images/avatar/veritas501.jpeg"),
        "url": "https://veritas501.space"
    },
    {
        "id": "LuckyCat",
        "intro": "16 级 / Web 🐱 / 现于长亭科技实习",
        "avatar":  ("../../images/avatar/princessprincepal.jpg"),
        "url": "https://jianshu.com/u/ad5c1e097b84"
    },
    {
        "id": "Ash",
        "intro": "16 级 / Java 开发攻城狮 / 996 选手 / 濒临猝死",
        "avatar":  ("../../images/avatar/ash.jpg"),
        "url": "#"
    },
    {
        "id": "Cyris",
        "intro": "16 级 / Web 前端 / 美工 / 阿里云搬砖",
        "avatar": "https://cdn.jsdelivr.net/npm/cyris/images/avatar.png",
        "url": "https://cyris.moe/"
    },
    {
        "id": "Acaleph",
        "intro": "16 级 / Web 前端 / 水母一小只 / 程序员鼓励师 / Cy 来组饥荒！",
        "avatar":  ("../../images/avatar/Acaleph.jpg"),
        "url": "#"
    },
    {
        "id": "b0lv42",
        "intro": "16级 / 大果子 / 毕业1年仍在寻找vidar娘接盘侠",
        "avatar":  ("../../images/avatar/b0lv42.jpg"),
        "url": "https://b0lv42.github.io/"
    },
    {
        "id": "ngc7293",
        "intro": "16 级 / 蟒蛇饲养员 / 高数小王子",
        "avatar":  ("../../images/avatar/ngc7293.jpg"),
        "url": "https://ngc7292.github.io/"
    },
    {
        "id": "ckj123",
        "intro": "16 级 / Web / 菜鸡第一人",
        "avatar":  ("../../images/avatar/ckj123.jpg"),
        "url": "https://www.ckj123.com"
    },
    {
        "id": "cru5h",
        "intro": "16级 / 前web手、现pwn手 / 菜鸡研究生 / scu",
        "avatar": "https://thirdqq.qlogo.cn/g?b=sdk&k=5kpiaPnLZ1cWrp0G8O4qHDg&s=640",
        "url": "#"
    },
    {
        "id": "xiaoyao52110",
        "intro": "16 级 / Bin 打杂 / 他们说菜都是假的，我是真的",
        "avatar":  ("../../images/avatar/xiaoyao52110.jpg"),
        "url": "#"
    },
    {
        "id": "Undefinedv",
        "intro": "15 级网安协会会长 / Web 安全",
        "avatar":  ("../../images/avatar/undefinedv.jpg"),
        "url": "#"
    },
    {
        "id": "Spine",
        "intro": "逆向 / 二进制安全",
        "avatar":  ("../../images/avatar/spine.jpg"),
        "url": "#"
    },
    {
        "id": "Tata",
        "intro": "二进制 CGC 入门水准 / 半吊子爬虫与反爬虫",
        "avatar":  ("../../images/avatar/tata.jpg"),
        "url": "#"
    },
    {
        "id": "Airbasic",
        "intro": "Web 安全 / 长亭科技安服部门 / TSRC 2015 年年度英雄榜第八、2016 年年度英雄榜第十三",
        "avatar":  ("../../images/avatar/airbasic.jpg"),
        "url": "#"
    },
    {
        "id": "jibo",
        "intro": "15 级 / 什么都不会的开发 / 打什么都菜",
        "avatar":  ("../../images/avatar/jibo.jpg"),
        "url": "#"
    },
    {
        "id": "Processor",
        "intro": "15 级 Vidar 会长 / 送分型逆向选手 / 13 段剑纯 / 差点没毕业 / 阿斯巴甜有点甜",
        "avatar":  ("../../images/avatar/Processor.jpeg"),
        "url": "https://processor.pub/"
    },
    {
        "id": "HeartSky",
        "intro": "15 级 / 挖不到洞 / 打不动 CTF / 内网渗透不了 / 工具写不出",
        "avatar":  ("../../images/avatar/heartsky.jpg"),
        "url": "http://heartsky.info"
    },
    {
        "id": "Minygd",
        "intro": "15 级 / 删库跑路熟练工 / 没事儿拍个照 / 企鹅",
        "avatar":  ("../../images/avatar/mingy.jpg"),
        "url": "#"
    },
    {
        "id": "Yotubird",
        "intro": "15 级 / 已入 Python 神教",
        "avatar":  ("../../images/avatar/Yotubird.png"),
        "url": "#"
    },
    {
        "id": "c014",
        "intro": "15 级 / Web 🐶 / 汪汪汪",
        "avatar":  ("../../images/avatar/c014.png"),
        "url": "#"
    },
    {
        "id": "Explorer",
        "intro": "14 级 HDUISA 会长 / 二进制安全 / 曾被 NULL、TD、蓝莲花等拉去凑人数 / 差点没毕业 / 长亭安研",
        "avatar":  ("../../images/avatar/Explorer.jpg"),
        "url": "#"
    },
    {
        "id": "Aklis",
        "intro": "14 级 HDUISA 副会长 / 二次元 / 拼多多安全工程师",
        "avatar":  ("../../images/avatar/aklis.jpg"),
        "url": "#"
    },
    {
        "id": "Sysorem",
        "intro": "14 级网安协会会长 / HDUISA 成员 / Web 安全 / Freebuf 安全社区特约作者 / FSI2015Freebuf 特邀嘉宾",
        "avatar":  ("../../images/avatar/sysorem.jpg"),
        "url": "#"
    },
    {
        "id": "Hcamael",
        "intro": "13 级 / 知道创宇 404 安全研究员 / 现在 Nu1L 划划水 / IoT、Web、二进制漏洞，密码学，区块链都看得懂一点，但啥也不会",
        "avatar":  ("../../images/avatar/hcamael.jpg"),
        "url": "#"
    },
    {
        "id": "LoRexxar",
        "intro": "14 级 / Web 🐶 / 杭电江流儿 / 自走棋主教守门员",
        "avatar":  ("../../images/avatar/lorexxar.jpg"),
        "url": "https://lorexxar.cn/"
    },
    {
        "id": "A1ex",
        "intro": "14 级网安协会副会长 / Web 安全",
        "avatar":  ("../../images/avatar/alex.jpg"),
        "url": "#"
    },
    {
        "id": "Ahlaman",
        "intro": "14 级网安协会副会长 / 无线安全",
        "avatar":  ("../../images/avatar/ahlaman.jpg"),
        "url": "#"
    },
    {
        "id": "lightless",
        "intro": "Web 安全 / 安全工程师 / 半吊子开发 / 半吊子安全研究",
        "avatar":  ("../../images/avatar/lightless.jpg"),
        "url": "https://lightless.me/"
    },
    {
        "id": "Edward_L",
        "intro": "13 级 HDUISA 会长 / Web 安全 / 华为安全部门 / 二进制安全，fuzz，符号执行方向研究",
        "avatar":  ("../../images/avatar/edward_L.jpg"),
        "url": "#"
    },
    {
        "id": "逆风",
        "intro": "13 级菜鸡 / 大数据打杂",
        "avatar":  ("../../images/avatar/deadwind4.jpeg"),
        "url": "https://github.com/deadwind4"
    },
    {
        "id": "陈斩仙",
        "intro": "什么都不会 / 咸鱼研究生 / <del>安恒</del>、<del>长亭</del> / SJTU",
        "avatar":  ("../../images/avatar/chenzhanxian.jpg"),
        "url": "https://mxgcccc4.github.io/"
    },
    {
        "id": "Eric",
        "intro": "渗透 / 人工智能 / 北师大博士在读",
        "avatar":  ("../../images/avatar/eric.jpg"),
        "url": "https://3riccc.github.io"
    }
]
se = requests.session() #存储session
for i in range(100):  #循环
    score = "http://week-1.hgame.lwsec.cn:31903/api/getScore"
    question = 'http://week-1.hgame.lwsec.cn:31903/api/getQuestion'
    verifyanswer = "http://week-1.hgame.lwsec.cn:31903/api/verifyAnswer"
    r1 = se.get(score) 
#获取分数及判断返回flag时中断循环
    if "hgame{" in r1.text:
      print(r1.json()["message"])
      break
    else:
#循环遍历信息表并且发送id验证
         r2 = se.get(question)#获取题目
         data1 = r2.json() #返回json格式
         find=data1["message"] #获取题目
#遍历字典
         for j in answer:
            if find in j.values(): #找到字典中的元素
                id = j["id"] #获取对应的id
                break
#发包
         data = {"id":id} #id
         r3 = se.post(verifyanswer,data=data)
         if "Correct answer!" in r3.text: #回答正确时会返回Correct answer!字样
             print(f"第{i+1}次回答正确")

hgame{Guess_who_i_am^Happy_Crawler} 

crypto

RSA

直接丢factordb分解就行了

from Crypto.Util.number import *
import gmpy2
e = 65537
c=110674792674017748243232351185896019660434718342001686906527789876264976328686134101972125493938434992787002915562500475480693297360867681000092725583284616353543422388489208114545007138606543678040798651836027433383282177081034151589935024292017207209056829250152219183518400364871109559825679273502274955582
n=135127138348299757374196447062640858416920350098320099993115949719051354213545596643216739555453946196078110834726375475981791223069451364024181952818056802089567064926510294124594174478123216516600368334763849206942942824711531334239106807454086389211139153023662266125937481669520771879355089997671125020789
p=11239134987804993586763559028187245057652550219515201768644770733869088185320740938450178816138394844329723311433549899499795775655921261664087997097294813
q=12022912661420941592569751731802639375088427463430162252113082619617837010913002515450223656942836378041122163833359097910935638423464006252814266959128953

phi=(q-1)*(p-1)
d=gmpy2.invert(e,phi)
m=pow(c,d,n)
print(long_to_bytes(m))
#b'hgame{factordb.com_is_strong!}'

神秘的电话

txt解base64得到信息

另外一个文件是莫斯的音频

音频morse：

1.手敲

----- ..--- ..--- ...-- . ..--.- .--. .-. .. .. -... .-.. -.-- ..--.- ..--.- .... --- -. .-- .- ..--.- .--- -- --. .... ..--.- ..-. --. -.- -.-. --.- .- --- --.- - -- ..-. .-.

只有倒着翻过十八层的篱笆才能抵达北欧神话的终点

猜测要逆序输出然后栅栏,西欧神话的终点是Vidar，杭电校队，解维吉尼亚

写个python转小写

a="WELCOME_TO_HGAME2023_AND_ENJOY_HACKING"
l=a.lower()
print("hgame{"+l+"}")
#hgame{welcome_to_hgame2023_and_enjoy_hacking}

2.工具解morse：

kali：apt install morse2ascii      安装

使用：morse2ascii xxx.wav

misc

e99p1ant_want_girlfriend

png长宽高一把嗦

Sign In

神秘的海报

lsb：

导出数据：

Sure enough, you still remember what we talked about at that time! This is part of the secret: `hgame{U_ Kn0w_LSB&W`.

I put the rest of the content here, https://drive.google.com/file/d/13kBos3Ixlfwkf3e0z0kJTEqBxm7RUk-G/view?usp=sharing,

if you directly access the google drive cloud disk download in China, it will be very slow, you can try to use Scientific Internet access solves the problem of slow or inaccessible access to external network resources.

This is my favorite music, there is another part of the secret in the music, I use Steghide to encrypt, the password is also the 6-digit password we agreed at the time, even if someone else finds out here, it should not be so easy to crack ( ( hope so

谷歌网盘下载一个音频，是一个音乐

Steghide 隐写，密钥为6位，试了一波弱密码 123456

爆破密码：Steghide使用教程及其密码爆破_Blood_Seeker的博客-CSDN博客_steghide

steghide extract -sf 6.wav -p 123456     //这里我把文件重命名了

hgame{U_Kn0w_LSB&Wav^Mp3_Stego}

Where am I

兔兔回家之前去了一个神秘的地方，并拍了张照上传到网盘，你知道他去了哪里吗？ flag格式为: hgame{经度时_经度分_经度秒_东经(E)/西经(W)_纬度时_纬度分_纬度秒_南纬(S)/北纬(N)}，秒精确到小数点后两位 例如: 11°22'33.99''E, 44°55'11.00''S 表示为 hgame{11_22_3399_E_44_55_1100_S}

看到题目上传网盘，流量包直接找http流

果不其然有upload

导出流量包http流

直接foremost分离出来一个rar

里面有一张图片。rar伪加密，010改第24个字节为00

解压出来一个图片，黑呼呼的

直接看exif信息

交了半天flag不对0.0.0..................................居然要4舍5入.....666666.....真不错

hgame{116_24_1488_E_39_54_5418_N}

Reverse

test your IDA

IDA打开就有flag

easyasm

chatgpt一步到位（ai直接给我解密脚本跑出来就是flag）

def dec(s):
  result = ""
  for c in s:
    result += chr(ord(c) ^ 0x33)
  return result

# 将字符串中的十六进制数字转化为 ASCII 码
encrypted_str = "0x5b,0x54,0x52,0x5e,0x56,0x48,0x44,0x56,0x5f,0x50,0x3,0x5e,0x56,0x6c,0x47,0x3,0x6c,0x41,0x56,0x6c,0x44,0x5c,0x41,0x2,0x57,0x12,0x4e"
encrypted_str = "".join([chr(int(x, 16)) for x in encrypted_str.split(",")])

print(dec(encrypted_str))
#hgame{welc0me_t0_re_wor1d!}

Pwn

test_nc

每日emo：

似花还似非花，也无人惜从教坠。—— 苏轼《水龙吟次韵章质夫杨花词》。

J_0k3r
关注
  • 1
    点赞
  • 踩
  • 1
    收藏
    觉得还不错? 一键收藏
  • 3
    评论
专栏目录
Tensorflow2——tensor排序 sort & argsort & top_k & Top-k Acc
weixin_43201090的博客
03-15 736
一、排序sort tf.sort( tensor , direction = ’ ’ ) tf.argsort( tensor ) 二、Top tf.math.top_k( tensor , int k ) ⇒ indices + values 利用top_k计算Acc
【Hgame2022】第一周misc和web题解
weixin_51614272的博客
02-15 1822
MISC 这个压缩包有点麻烦 下载压缩包，发现有注释，提示是暴力破解6位数字的密码 破解得483279 得到下一个zip压缩包和提示 判断应该是一个密码本，字典包。所以选择字典爆破，得到密码 &-`;qpCKliw2yTR\ 发现又是一个zip压缩包，里面还有一个文件和之前的readme是一样的文件（已知部分明文），所以直接明文攻击 根据提示：注意将明文压缩时，压缩包的属性要设置为仅储存 得到一个jpg文件 好康的流量 群青(其实是幽灵东京） Web easy_aut
[HGAME 2023 week1]Classic Childhood Game js前端查看
m0_64180167的博客
10-31 170
给了我们一个游戏 按照web的尿性 都是要通关或者干嘛才可以 我们现在去看看js。
hgame 2022 week1
zip471642048的博客
02-09 848
Crypto Dancing Line 八位二进制走线图→=0 ↓=1 转ASCII码 exp from PIL import Image img = Image.open('Dancing Line.bmp') width,height = img.size pix_list = [[] for i in range(136)] for w in range(width): for h in range(height): pix = img.getpixel((w,h))
PWN-COMPETITION-HGAME2022-Week1
P1umH0的博客
01-28 1232
PWN-COMPETITION-HGAME2022Week1enter_the_pwn_landenter_the_evil_pwn_landoldfashion_orw(unsolved)ser_per_fa(unsol)test_your_nctest_your_gdb Week1 enter_the_pwn_land 栈溢出，需要注意的是下标 i 的地址比输入s的地址更高 s溢出会覆盖 i ，于是需要小心地覆写 i 的值，让循环顺利执行下去 然后就是常规的ret2libc # -*- coding:
vm虚拟机-简单题目（hgame-week4-easyvm、cg-ctf wxyVM1/2
01-08
然后先写了前面的cg-ctf的两个题目，其实当时做的时候还没太大虚拟机的感觉，后面接触到hgame的题目，然后再看的时候就感觉到有些那个意思，但是两个题目是基础题目也就不是太难为人，看成数据处理的考点也做的出来...
HGAME cdcollector-开源
04-24
这是现有项目cdcollector的mod，用于为拥有过多数据库的人使用phpmysql存储您的HGAMES数据库。
0hgame:用0h制作的游戏->阅读README
05-01
（对于那些谁是它asceptical， ） 规则： 1- No one talk about fight club (?)2- DO NOT TOUCH BLACK THINGS IF YOU DONT WANT TO START AGAIN3- Try to reach the other side of the window to became the king ...
hgame:Haskell 游戏引擎
05-30
游戏 Haskell 游戏引擎
单表替换密码算法破解工具
01-15
网络密码中介绍的基本加密方法，与凯撒密码相似，该软件提供基本的替换功能
2022hgame-week1 wp
Anton1a的博客
01-28 1714
记录一下hgame比赛。 WEB easy_auth 打开题目是一个登录框 题目描述里有admin，那就随便输个弱口令抓包看一下 看见返回包有这个，就想到这个题肯定考察js，为验证一下想法看一下源代码，里面存在login.js打开看一下发现确实是前端验证的 之后就注册一个账号登录看一下登录成功的返回包 登录成功返回的结果如下： {"code":2000,"message":"success","count":0,"data":[{"token":"eyJ...
2022---hgame第一周WriteUp
3tefanie丶zhou的博客
02-02 4110
【请不要把陌生人的些许善意，视为珍稀的瑰宝，却把身边亲近人的全部付出，当做天经地义的事情，对其视而不见。】
[HGAME 2022 week1]easyasm
weixin_61154173的博客
10-28 972
re简单题
JavaWeb
热门推荐
qq_44776943的博客
01-14 29万+
JavaWeb Java. web 1. 基本概念 1.1 前言 web开发： web：网页的意思 www.baidu.com 静态web html. Css 提供给所有人看的数据始终不会发生变化！ 动态web 淘宝等，几乎是所有的网站！ 提供给所有人看的数据始终会发生变化，每个人在不同的时间，不同的地点看到的信息各不相同！ 技术栈：Servlet/JSP，ASP，P...
hgame2022re week1
m0_58348028的博客
02-04 987
easyasm 16位的汇编， 附件在这里：链接：https://pan.baidu.com/s/12Sk92AvtXV0rzaRmiBoKFA 提取码：h0r1 ida pro打开 通过分析这张图，我们可以知道在1处进行对比后若正确则走3处直接输出，若没有比对成功就走2处，由此循环直到si==1Ch，所以我们只需要分析2处是怎么处理的 seg003:0000 public start seg003:0000 start ..
[HGAME 2022 week1]test your gdb
红叶的博客
03-06 339
word函数中，s2被加密，然后使用memcmp函数进行 buf 与 s2 的对比。main函数，个人理解是通过 pthread_create 函数创建并调用一个线程，创建的线程同等于 read(0,buf,0x28)。注意：一定不能使用sendline(v2)，因为sendline会添加换行符，因此进入程序的下一个函数，而不是readfsqword。我们发送了16个字节的v2，也就是0x10大小的v2，我们还需要接收0x18大小的垃圾数据，之后的0x08才是我们的Canary。，也就是s2的内容。
hgame是什么?【详解】 【我们不能光玩game，而不了解game的文化】
FreeXploiT
05-15 1万+
allyesno:今天偶闻hgame资深人士swan对hgame的言论 [12:23] 最开始的那种游戏，出现图片的时候你要按h键才能往下显示[12:24] 后来就用h-game代替了[12:24] 然后发展到hentai[12:24] 这个是日文变态的意思~嘿嘿，不过是现有h才有hentai的下面我们来看看一篇更详细的说明 希望对大家以后提高玩hgame的水平有帮助H-gam
hgame2023 week1 writeup
01-15 3934
hgame2023 WEEK1
请你完善上面的代码 添加从E:\Desktop\2024hgame\week1\crypto\奇怪的图片\png_out文件夹里面获取图片的功能
最新发布
02-04
以下是完善代码的示例，添加了从指定文件夹获取图片的功能： ```python import os from PIL import Image def get_images_from_folder(folder_path): images = [] for filename in os.listdir(folder_path): if filename.endswith(".png"): image_path = os.path.join(folder_path, filename) image = Image.open(image_path) images.append(image) return images # 指定文件夹路径 folder_path = "E:/Desktop/2024hgame/week1/crypto/奇怪的图片/png_out" # 获取文件夹中的图片 images = get_images_from_folder(folder_path) # 在代码中使用获取到的图片 # ... ```

“相关推荐”对你有帮助么？

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论 3
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值