0RAYS-祥云杯writeup-misc

阅读量327152

|

发布时间 : 2021-08-25 16:30:21

 

Misc

层层取证

用volatility取证,发现其存在几个可疑进程,FTK Imager就是一个磁盘的取证工具,另一个文件夹的镜像文件就是用这个来取证

stikynot进程是一个便利贴程序

同时还有explorer存在,先看一下ie记录

Process: 2384 explorer.exe
Cache type "DEST" at 0x77c6fa3
Last modified: 2020-08-15 19:39:48 UTC+0000
Last accessed: 2020-08-15 11:39:50 UTC+0000
URL: XiaoMing@file:///C:/Users/XiaoMing/Desktop/flag.txt

得到了一个flag.txt的目录
然后用winrar解压Forensic_image.001得到一个Forensic_image,用FTK加载这个镜像

前往目录找到flag.txt

1

提示说需要仿真
然后继续在FTK里搜索一下xiaoming目录下的文件,在appdata/local/temp下找到两个可以的流量包

在上图所指流量包中,找到一个flag.docx

直接追踪UDP流可以得到一个rar文件
提示压缩包密码和开机密码一样
通过hashdump得到

Administrator:500:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
Guest:501:aad3b435b51404eeaad3b435b51404ee:31d6cfe0d16ae931b73c59d7e0c089c0:::
XinSai:1000:aad3b435b51404eeaad3b435b51404ee:27caa41e7118fd4429d9b9cbd87aaa40:::
XiaoMing:1001:aad3b435b51404eeaad3b435b51404ee:92efa7f9f2740956d51157f46521f941:::

将xiaoming的密码解密一下得到开机密码为xiaoming_handsome
打开压缩包,发现docx文件还有加密,没有密码了,尝试去仿真,利用FTK可以直接制作镜像,然后用虚拟机打开

发现两张便签叠在了一起

得到了文档密码

flag{9ca871b668f2-b668-097c-cbm8-9op404c891e2}

shuffle_code

得到一个reverse的png图片,反转一下得到二维码

扫一下得到

col426327/1132122/1211132223/3113253/61531113/111312/5323125/2222/11122153/311111/14312121/11231211/2423211/262121/422221/622132/31121/221122111/5122311/2111221221/121692/12122111/232326/11142121/31253151/22111111123/111313121/1111111/2151371row31121113/12321133/13111112/13112221121/12112232/16113232/11311311/21111231/11111211/711111117/2124112211/611111241/1311371/131152131/13/2121111311/521(11)11/1311321131/1211211/11111111/14221262/3411131/161713/422141/7122117/1111112111/7111412/71111121/131112131

根据行列的提示,以及711111117猜测是一个二维码的黑块的数据,搜索一下得到这是数织
找到一个解密的工具,解密

但是有部分无法得出,存在多种可能,所以先随便填一种
然后得到的图片是将二维码的每一行进行了打乱
按照二维码的定位符,可以先将上下大致都还原

然后根据二维码的读取方式猜测前几个字符为flag{,然后一步步还原每一行,得到二维码

鸣雏恋

下载附件得到一个docx文件,修改为zip后缀,得到key.txt和love.zip

key.txt零宽解密得到压缩包密码

解压压缩包得到129488张图片

一共有两种图片,怀疑是0和1的置换

写个脚本读文件MD5,置换成01。

import hashlib
import sys
def getmd5(filename):
    md5hash = hashlib.md5()
    f = open(filename, 'rb')
    b = f.read()
    md5hash.update(b)
    f.close()
    return md5hash.hexdigest()
flag = ""
fp = open('data.txt', 'w')
content = "out\\"
for i in range(0, 129488):
    # print(getmd5(content + str(i) + ".png"))
    if getmd5(content + str(i) + ".png") == "a29b9b5c770a188849b787047c7d994d":
        flag += "0"
    elif getmd5(content + str(i) + ".png") == "34e828cce80ef24b02c48310a697f97c":
        flag += "1"
    else:
        print("error!!!")
        continue
fp.write(''.join([chr(i) for i in [int(flag[b:b+8], 2) for b in range(0, len(flag), 8)]]))
fp.close()

解得

data:image/png;base64,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

base64解密一下,是一个png图片

保存成png图片,图片下方即为flag

ChieftainsSecret

下载附件得到一个docx文件和一张jpg图片,docx文件是题目描述,没什么用。

jpg图片是一个老式拨号机。

JPG图片用winhex打开发现FFD9文件尾不在文件的最后,后面隐藏了一个rar文件

提取出rar文件,里面有一个csv文件和一张jpg图片

谷歌搜索下TLE5501芯片,可知会输出一个角度,正好原图上这种老式拨号机,是通过转动转盘旋转读取数字的。

csv内有PC0-3四个数字,根据芯片图可知正好对应SIN_P,SIN_N,COS_P,COS_N。

已知sin cos可以计算tan或arctan,知道tan或arctan即可求得角度,直接利用excel表格计算

求sin坐标

求cos坐标

知道了sin和cos,就可以求arctan了。

在excel里发现用这个最为方便

这里写的是G2=TAN(E2,F2), H2=ATAN(F2,E2)*180/PI()

之后做一个表

这个就是拨号的角度变化图,初始状态为-180度,即图中这个地方

之后约每360/15=24度为一个数字,老式拨号机就是转动到一个数字后,再切回起点。故图中是此起彼伏的山脉形状。

之后根据约24度为一个数字,最高点就是转动到需要的电话号码数字然后开始拨回起点。

得到flag:

77085962457

考古

下载附件是一个是一个winXP的内存文件

首先pstree一下看看有什么进程,可以看到cmd进程

然后cmdscan一下,发现一些信息

根据提示可以得出是跟C盘里的Oneclickcleanup.exe有关

filescan一下

然后dumpfiles出来,得到一个exe文件

用IDA打开exe文件,F5一下

得到一个加密脚本

data_start的值为:

数据很多,就不全部放出来了。

key为

然后可以写一个逆脚本反推一下

key = 'this_a_key'
flag = ''
data = "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"
for i in range(0, len(data), 2):
    flag += str(hex(int(data[i:i+2], 16) ^ ord(key[i//2%10])))[2:].zfill(2)
print(flag)

得到:

d0cf11e0a1b11ae1000000000000000000000000000000003e000300feff0900060000000000000000000000010000000b00000000000000001000000e00000001000000feffffff000000000c000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff52006f006f007400200045006e00740072007900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000016000500ffffffffffffffff030000000009020000000000c000000000000046000000000000000000000000f0ec67b8ef7ad70105000000800c000000000000010043006f006d0070004f0062006a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000012000201ffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000006e0000000000000057006f007200640044006f00630075006d0065006e007400000000000000000000000000000000000000000000000000000000000000000000000000000000001a000201ffffffff04000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000002000000520a0000000000004f0062006a0065006300740050006f006f006c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160001010100000002000000ffffffff000000000000000000000000000000000000000020c0caacef7ad70120c0caacef7ad70100000000000000000000000002000000fdfffffffefffffffeffffff07000000060000000400000008000000090000000a000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0500530075006d006d0061007200790049006e0066006f0072006d006100740069006f006e00000000000000000000000000000000000000000000000000000028000200ffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000001000000046010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff030000000400000005000000060000000700000008000000090000000a0000000b0000000c0000000d0000000e0000000f000000160000001100000012000000130000001400000015000000feffffff1700000018000000190000001a0000001b0000001c0000001d0000001e0000001f000000200000002100000022000000230000002400000025000000260000002700000028000000290000002a0000002b0000002c0000002d0000002e0000002f0000003000000031000000fefffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeff0000040002000000000000000000000000000000000001000000e0859ff2f94f6810ab9108002b27b3d930000000160100000a000000070000009800000002000000ae00000008000000bf00000001000000cb0000000f000000d100000010000000d900000012000000e10000000e000000fc0000000900000004010000130000000e010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000e000000433a5c4e6f726d616c2e646f74001e00000009000000537562204d41494e001e0000000400000079696e0002000000e404030000000000000003000000000000001e000000130000004d6963726f736f667420576f726420362e300003000000000000001e000000020000003500030000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000397d06641a1b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100feff030a0000ffffffff0009020000000000c0000000000000461c0000004d6963726f736f667420576f726420362e3020446f63756d656e74000a0000004d53576f7264446f630010000000576f72642e446f63756d656e742e3600f439b271000000000000000000000000000000000000000000000000000000000000dca5680045c0090400002500650000000000000000000000000300004b030000520a0000000000000000000000000000000000004b0000000000000000000000000000000000000000000000000000000000000000000000000800008c000000000800008c0000008c080000000000008c080000000000008c080000000000008c080000000000008c08000014000000c408000000000000b60800000e000000c408000000000000c408000000000000c408000000000000c40800000a000000ce0800000a000000c4080000000000009809000043000000d808000000000000d808000000000000d808000000000000d808000000000000d808000000000000d808000000000000d808000000000000d808000000000000000000000000000051090000000000005109000000000000510900000000000051090000000000005109000000000000510900001e000000db09000058000000330a00001f0000006f09000029000000000000000000000000000000000000008c08000000000000d80800000000000000000200030001000100d808000000000000d80800000000000000000000000000000000000000000000d808000000000000d8080000000000006f09000000000000d8080000000000008c080000000000008c08000000000000d80800000000000000000000000000000000000000000000d808000000000000d808000000000000d808000000000000d808000000000000d8080000000000008c08000000000000d8080000000000008c08000000000000d8080000000000001f0900000000000000000000000000000000000000000000a008000008000000a80800000e0000008c080000000000008c080000000000008c080000000000008c08000000000000d8080000000000001f09000000000000d808000047000000d80800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d7920667269656e642c204920736169642c207468657265206973207265616c6c79206e6f20666c616720686572652c2077687920646f6e927420796f752062656c69657665206d653f0d2c2d49364429606c6463494a062d28470b4b414c4a56154f48494b494f4f4f4c191f191e491c1518154e4e1f4c18181d1c1f491e1d000300004b0300008603000000fe000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002750102000300004b030000fe00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000010e000f00080001004b000f00000000003c000040f1ff02003c00064e6f726d616c00210000000f1d0009e001c003a00580076009400b200d000fe0100000000000000000000006005d030061090400000000000000000000000000000000000022004140f2ffa10022001644656661756c742050617261677261706820466f6e740000000000000000000000000000004b0000000300ffffffff0300ffffffff01000420ffff0100000000004b000000000000000000000000004b0000000003c021670200030000860300000200000300004b030000030047000379696e0b433a5c663134672e646f740379696e30433a5c57494e4e545c50726f66696c65735c41646d696e6973747261746f725c4465736b746f705c663134672e646f74ff010100552d00000000ffff4b0300003b000000030000004b03000010090004663134670100110100000004463134470040018001003f0000003f0000000800340134013f000000000000003f0000000105005581633800021c000000000000004a0000004b000000300000030000010030004a0300000000430015169001000054696d6573204e657720526f6d616e000c169001020053796d626f6c000b2690010000417269616c00113590010000436f7572696572204e65770022000400310888180000d0020000680100000000a48c97c7a88c97c70000000005000300000000000000000000000000000000000400831000000000000000000000000000000000000000000000000000002403000000001f00000008537562204d41494e000000000379696e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000052006f006f007400200045006e00740072007900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000016000500ffffffffffffffff030000000009020000000000c0000000000000460000000000000000000000006025b8c9ef7ad70110000000800c000000000000010043006f006d0070004f0062006a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000012000201ffffffffffffffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000006e0000000000000057006f007200640044006f00630075006d0065006e007400000000000000000000000000000000000000000000000000000000000000000000000000000000001a000201ffffffff04000000ffffffff00000000000000000000000000000000000000000000000000000000000000000000000002000000520a0000000000004f0062006a0065006300740050006f006f006c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000160001010100000002000000ffffffff000000000000000000000000000000000000000020c0caacef7ad70120c0caacef7ad701000000000000000000000000ffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0d000000fdfffffffefffffffeffffff12000000110000000f000000130000001400000015000000feffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff0500530075006d006d0061007200790049006e0066006f0072006d006100740069006f006e00000000000000000000000000000000000000000000000000000028000200ffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000001000000046010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffffffffffffffffffff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff030000000400000005000000060000000700000008000000090000000a0000000b0000000c0000000d0000000e0000000f000000160000001100000012000000130000001400000015000000feffffff1700000018000000190000001a0000001b0000001c0000001d0000001e0000001f000000200000002100000022000000230000002400000025000000260000002700000028000000290000002a0000002b0000002c0000002d0000002e0000002f0000003000000031000000fefffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffeff0000040002000000000000000000000000000000000001000000e0859ff2f94f6810ab9108002b27b3d930000000160100000a000000070000009800000002000000ae00000008000000bf00000001000000cb0000000f000000d100000010000000d900000012000000e10000000e000000fc0000000900000004010000130000000e010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e0000000e000000433a5c4e6f726d616c2e646f74001e00000009000000537562204d41494e001e0000000400000079696e0002000000e404030000000000000003000000000000001e000000130000004d6963726f736f667420576f726420362e300003000000000000001e00000002000000360003000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014502b4937362c2d49364429606c6463494a06ad2847064b414c4a56154f48494b494f4f004f4c191f00191e491c001518154e004e1f4c1800181d1c1f491e1d14502b493736000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100feff030a0000ffffffff0009020000000000c0000000000000461c0000004d6963726f736f667420576f726420362e3020446f63756d656e74000a0000004d53576f7264446f630010000000576f72642e446f63756d656e742e3600f439b271000000000000000000000000000000000000000000000000000000000000dca5680045c0090400003500650000000000000000000000000300004b030000520a0000000000000000000000000000000000004b0000000000000000000000000000000000000000000000000000000000000000000000000800008c000000000800008c0000008c080000000000008c080000000000008c080000000000008c080000000000008c08000014000000c408000000000000b60800000e000000c408000000000000c408000000000000c408000000000000c40800000a000000ce0800000a000000c4080000000000009809000043000000d808000000000000d808000000000000d808000000000000d808000000000000d808000000000000d808000000000000d808000000000000d808000000000000000000000000000051090000000000005109000000000000510900000000000051090000000000005109000000000000510900001e000000db09000058000000330a00001f0000006f09000029000000000000000000000000000000000000008c08000000000000d80800000000000000000200030001000100d808000000000000d80800000000000000000000000000000000000000000000d808000000000000d8080000000000006f09000000000000d8080000000000008c080000000000008c08000000000000d80800000000000000000000000000000000000000000000d808000000000000d808000000000000d808000000000000d808000000000000d8080000000000008c08000000000000d8080000000000008c08000000000000d8080000000000001f0900000000000000000000000000000000000000000000a008000008000000a80800000e0000008c080000000000008c080000000000008c080000000000008c08000000000000d8080000000000001f09000000000000d808000047000000d80800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004d7920667269656e642c204920736169642c207468657265206973207265616c6c79206e6f20666c616720686572652c2077687920646f6e927420796f752062656c69657665206d653f0d2c2d49364429606c6463494a062d28470b4b414c4a56154f48494b494f4f4f4c191f191e491c1518154e4e1f4c18181d1c1f491e1d000300004b03000086030000c603000000fefe00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002750103000300004b030000fe00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000010e000f00080001004b000f00000000003c000040f1ff02003c00064e6f726d616c00210000000f1d0009e001c003a00580076009400b200d000fe0100000000000000000000006005d030061090400000000000000000000000000000000000022004140f2ffa10022001644656661756c742050617261677261706820466f6e740000000000000000000000000000004b0000000300ffffffff0300ffffffff01000420ffff0100000000004b000000000000000000000000004b0000000003c021670200030000c60300000200000300004b030000030047000379696e0b433a5c663134672e646f740379696e30433a5c57494e4e545c50726f66696c65735c41646d696e6973747261746f725c4465736b746f705c663134672e646f74ff010100552d00000000ffff0000000040000000060000008603000010090004663134670100110100000004463134470040018001003f0000003f0000000800010001003f000000000000003f0000000105005581633800021c000000000000004a0000004b000000300000030000010030004a0300000000430015169001000054696d6573204e657720526f6d616e000c169001020053796d626f6c000b2690010000417269616c00113590010000436f7572696572204e65770022000400310888180000d0020000680100000000a48c97c7a88c97c70000000006000300000000000000000000000000000000000400831000000000000000000000000000000000000000000000000000002403000000001f00000008537562204d41494e000000000379696e0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000

转一下十六进制

导出后是一个doc文件

用winhex打开看一下,发现在word上显示的信息后面还有一串东西

XOR爆破一下,发现flag,但是不对,很是疑惑嗷。

查看十六进制,在后面又看到了类似于疑惑爆破后为flag的字符串

疑惑爆破一下得到最终flag

此时正好就是对字符’-‘进行异或

本文由0RAYS原创发布

转载,请参考转载声明,注明出处: https://www.anquanke.com/post/id/251367

安全客 - 有思想的安全新媒体

分享到:微信
+10赞
收藏
0RAYS
分享到:微信

发表评论

内容需知
合作单位
  • 安全客
  • 安全客
Copyright © 北京奇虎科技有限公司 三六零数字安全科技集团有限公司 安全客 All Rights Reserved 京ICP备08010314号-66