BUUCTF [*CTF2019]otaku

One day,you and your otaku friend went to the comic expo together and he had a car accident right beside you.Before he died,he gave you a USB hard disk which contained this zip.Please find out his last wish.
提示:The txt is GBK encoding.

首先这道题  原题提示了编码是GBK   BUU这里没有提示

如果是百度搜这道题的话,大部分wp都是那个水星的博客 ,感觉他GBK那里没说清楚,以下是谷歌后的做法

下载附件后 用360压缩打开下载的附件(无视伪加密),里面是flag.zip和一个doc

doc这里就要注意了,可能有坑,如果你平时做过杂项题的话,你的word选项这时应该是显示隐藏文字的,这里最好是把显示隐藏文字的选项关了,再打开,对比一下就知道隐藏的内容了。

再看flag.zip里的last words应该也联想到明文攻击了,注意word里隐藏文字不能直接复制,选中那段话右键字体里把隐藏前面的钩去掉后就可以复制,接下来复制到txt里的话 ,另存为发现没有GBK 的选项,如果另存为选择ANSI的话,TXT文件的CRC32和flag.zip里的last words不一致。

谷歌后知道可以用python解决

#encoding=GBK
f = open("d:\\test.txt", "w")
s="Hello everyone, I am Gilbert. Everyone thought that I was killed, but actually I survived. Now that I have no cash with me and I’m trapped in another country. I can't contact Violet now. She must be desperate to see me and I don't want her to cry for me. I need to pay 300 for the train, and 88 for the meal. Cash or battlenet point are both accepted. I don't play the Hearthstone, and I don't even know what is Rastakhan's Rumble."
f.write(s)
f.close()

然后对txt用winrar压缩zip 发现crc32一致,可以明文攻击了,后面的就不用说了,我就卡在想用txt保存成GBK这里

 

 

 

 

  • 0
    点赞
  • 2
    收藏
    觉得还不错? 一键收藏
  • 1
    评论

“相关推荐”对你有帮助么?

  • 非常没帮助
  • 没帮助
  • 一般
  • 有帮助
  • 非常有帮助
提交
评论 1
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值