一种利用返回地址来提供对比字符的新出题方式
flag里的每一个值都对应一个函数,函数输出一个字符同时将输入的flag的每个值与其他两个值异或,返回值是下一个地址,利用地址跳转来最后组成congratulate_you,这样结果也有了,算法也有了,逆向写出爆破脚本。
for i in range(128):
if 0x401100 ^ i ^ 0x95 == 0x4011C0: # 0
print(chr(i),end='')
for i in range(128):
if 0x401200 ^ i ^ 0x8F == 0x4012D0: # 1
print(chr(i),end='')
for i in range(128):
if 0x401500 ^ i ^ 0x42 == 0x401510: # 2
print(chr(i),end='')
for i in range(128):
if 0x401400 ^ i ^ 0xF == 0x401450: # 3
print(chr(i),end='')
for i in range(128):
if 0x401300 ^ i ^ 0xA3 == 0x401390: # 4
print(chr(i),end='')
for i in range(128):
if 0x401100 ^ i ^ 0x78 == 0x401100: # 5
print(chr(i),end='')
for i in range(128):
if 0x401000 ^ i ^ 0xc3 == 0x4010A0: # 6
print(chr(i),end='')
for i in range(128):
if (0x4012FC + 4) ^ i ^ 0x55 == 0x401330: # 7
print(chr(i),end='')
for i in range(128):
if 0x401100 ^ i ^ 0x51 == 0x401160: # 8
print(chr(i),end='')
for i in range(128):
if 0x401200 ^ i ^ 0x4c == 0x401220: # 9
print(chr(i),end='')
for i in range(128):
if 0x401500 ^ i ^ 0x43 == 0x401570: # 10
print(chr(i),end='')
for i in range(128):
if 0x401300 ^ i ^ 0x9e == 0x4013F0: # 11
print(chr(i),end='')
for i in range(128):
if 0x401200 ^ i ^ 0xb7 == 0x401280: # 12
print(chr(i),end='')
#U_R_3xce1l3n7