攻防世界WP-reverse-tinyctf-2014-tt3441810

可以看到是一个plain text。用ue打开
然后看看这些数对应的ASCII码是多少。

a = [0x68,0x66,0x6C,0x00,0x00,0x48,0xBF,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x48,0x8D,0x34,0x24,0x48,0xBA,0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x48,0xB8,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x0F,0x05,0x68,0x61,0x67,0x00,0x00,0x48,0xBF,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x48,0x8D,0x34,0x24,0x48,0xBA,0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x48,0xB8,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x0F,0x05,0x68,0x7B,0x70,0x00,0x00,0x48,0xBF,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x48,0x8D,0x34,0x24,0x48,0xBA,0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x48,0xB8,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x0F,0x05,0x68,0x6F,0x70,0x00,0x00,0x48,0xBF,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x48,0x8D,0x34,0x24,0x48,0xBA,0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x48,0xB8,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x0F,0x05,0x68,0x70,0x6F,0x00,0x00,0x48,0xBF,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x48,0x8D,0x34,0x24,0x48,0xBA,0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x48,0xB8,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x0F,0x05,0x68,0x70,0x72,0x00,0x00,0x48,0xBF,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x48,0x8D,0x34,0x24,0x48,0xBA,0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x48,0xB8,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x0F,0x05,0x68,0x65,0x74,0x00,0x00,0x48,0xBF,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x48,0x8D,0x34,0x24,0x48,0xBA,0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x48,0xB8,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x0F,0x05,0x68,0x7D,0x0A,0x00,0x00,0x48,0xBF,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x48,0x8D,0x34,0x24,0x48,0xBA,0x02,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x48,0xB8,0x01,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x0F,0x05,0x48,0x31,0xFF,0x48,0xB8,0x3C,0x00,0x00,0x00,0x00,0x00,0x00,0x00,0x0F,0x05]
s=''
for i in range(len(a)):
	if(32<a[i]<=127):
		s += chr(a[i])
print(s)

做判断是因为不在这个范围内的字符也看不到或者不是flag的格式。
结果如下
hflHH4$HHhagHH4$HHh{pHH4$HHhopHH4$HHhpoHH4$HHhprHH4$HHhetHH4$HHh}HH4$HHH1H<
可以看到HH4$HHh重复，把它去掉。
hflag{poppopret}1H<
但是这个题的flag就很坑，真正的flag是poppopret。