[GXYCTF2019]SXMgdGhpcyBiYXNlPw==

最新推荐文章于 2023-03-05 14:37:38 发布

[mzq]

最新推荐文章于 2023-03-05 14:37:38 发布

阅读量342

点赞数

分类专栏： buuctf ctf 笔记文章标签：网络安全

本文链接：https://blog.csdn.net/zip471642048/article/details/125374926

版权

笔记同时被 3 个专栏收录

113 篇文章 5 订阅

订阅专栏

ctf

107 篇文章 4 订阅

订阅专栏

buuctf

39 篇文章 0 订阅

订阅专栏

[GXYCTF2019]SXMgdGhpcyBiYXNlPw==

查看flag.txt,下意识就认为应该是base隐写
在这里插入图片描述
exp

from urllib3.connectionpool import xrange


def get_base64_diff_value(s1, s2):
    base64chars = 'ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/'
    res = 0
    for i in xrange(len(s2)):
        if s1[i] != s2[i]:
            return abs(base64chars.index(s1[i]) - base64chars.index(s2[i]))
    return res


def solve_stego():
    with open('flag.txt', 'rb') as f:
        file_lines = f.readlines()
        bin_str = ''
        for line in file_lines:
            steg_line = line.replace('\n', '')
            norm_line = line.replace('\n', '').decode('base64').encode('base64').replace('\n', '')
            diff = get_base64_diff_value(steg_line, norm_line)
            print diff
            pads_num = steg_line.count('=')
            if diff:
                bin_str += bin(diff)[2:].zfill(pads_num * 2)
            else:
                bin_str += '0' * pads_num * 2
            print goflag(bin_str)


def goflag(bin_str):
    res_str = ''
    for i in xrange(0, len(bin_str), 8):
        res_str += chr(int(bin_str[i:i + 8], 2))
    return res_str


if __name__ == '__main__':
    solve_stego()