{"id":74,"date":"2019-03-31T01:35:06","date_gmt":"2019-03-30T17:35:06","guid":{"rendered":"https:\/\/66.42.36.110\/?p=74"},"modified":"2019-09-01T21:13:18","modified_gmt":"2019-09-01T13:13:18","slug":"welcome","status":"publish","type":"post","link":"https:\/\/www.eolstudy.com\/index.php\/2019\/03\/write-ups\/74\/","title":{"rendered":"Welcome! \u2014\u2014\u9690\u5199\u5165\u95e8\u4f8b\u9898"},"content":{"rendered":"\n

\u672c\u9898\u6e90\u81ea Pragyan CTF 2019\uff0c\u6bd4\u8d5b\u7ed3\u675f\u65f6\u5206\u503c 50 pts\u3002<\/p>\n\n\n\n

\u5c31\u4ee5\u8fd9\u4e2a\u6781\u5176\u5165\u95e8\u7684\u7b80\u5355\u9898\u5f00\u59cb\u6211\u7684\u9690\u5199\u9898 Write-up \u5427\uff08\u6bd5\u7adf\u7a0d\u96be\u4e00\u70b9\u5c31\u4e0d\u4f1a\u4e86<\/del><\/p>\n\n\n

\n
\n
\n
\u9884\u5907\u77e5\u8bc6\uff08<span style="color: red;">Spoiler Alert!<\/span>\uff09<\/div>\n keyboard_arrow_down<\/i>\n <\/div>\n
\n

<\/p>\n

    \n
  • \n
      \n
    • JPEG \u6587\u4ef6\u4ee5 0xFF D8<\/code> \u5f00\u59cb\uff0c\u6b64\u56fa\u5b9a\u7801\u88ab\u79f0\u4e3a SOI (start of image)\uff1b<\/li>\n
    • JPEG \u6587\u4ef6\u7684 EOI (end of image) \u4e3a 0xFF D9<\/code>\uff1b<\/li>\n
    • ZIP \u6587\u4ef6\u56fa\u5b9a\u5f00\u5934\u4e3a 0x50 4B 03 04<\/code>\u3002<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n

      <\/p>\n <\/div>\n <\/div>\n <\/div>\n\n\n

      \u9996\u5148\uff0c\u539f\u6587\u4ef6\u5728\u6b64\uff1a<\/p>\n\n\n\n

      <\/div>
      <\/div><\/div><\/div>\"https:\/\/www.eolstudy.com\/wp-content\/uploads\/2019\/03\/welcome.jpeg\"<\/figure><\/figure><\/div>\n\n\n\n

      \u9690\u5199\u9898\u5957\u8def\uff0c\u5148\u7528\u5341\u516d\u8fdb\u5236\u67e5\u770b\u5668\u6253\u5f00\uff08\u672c\u6587\u91c7\u7528\u5de5\u5177\u4e3a Hex Fiend\uff09\u3002<\/p>\n\n\n\n

      <\/div>
      <\/div><\/div><\/div>\"http:\/\/45.76.150.185\/wp-content\/uploads\/2019\/04\/welcom-head-1024x205.png\"<\/figure><\/figure>\n\n\n\n

      \u68c0\u67e5 SOI \u4e3a 0xFF D8<\/code>\uff0c\u65e0\u5f02\u5e38\uff1b\u7136\u800c\u6587\u4ef6\u7ed3\u5c3e\u5374\u5e76\u672a\u53d1\u73b0\u6b63\u786e\u7684 EOI\uff08EOI \u4e0d\u662f Eol!!!\uff09\uff1a<\/p>\n\n\n\n

      <\/div>
      <\/div><\/div><\/div>\"http:\/\/45.76.150.185\/wp-content\/uploads\/2019\/04\/welcome-end-1024x230.png\"<\/figure><\/figure><\/div>\n\n\n\n

      \u4e0e\u6b64\u540c\u65f6\uff0c\u6ce8\u610f\u5230\u6587\u672c\u663e\u793a\u533a\u6709 d.zip<\/code> \u5b57\u6837\uff0c\u63a8\u6d4b\u56fe\u7247\u4e2d\u63ba\u5165\u4e86\u4e00\u4e2a zip \u538b\u7f29\u6587\u4ef6\u3002<\/p>\n\n\n\n

      \u6ce8\u610f\u5230\u56fe\u7247\u5e76\u672a\u635f\u574f\uff0c\u56e0\u6b64\u56fe\u7247\u7684 JEPG \u90e8\u5206\u5e94\u5df2\u7b26\u5408\u6807\u51c6\uff0c\u6545\u67e5\u627e EOI\uff1a<\/p>\n\n\n\n

      <\/div>
      <\/div><\/div><\/div>\"http:\/\/45.76.150.185\/wp-content\/uploads\/2019\/04\/welcome-searchEOI-1024x278.png\"<\/figure><\/figure><\/div>\n\n\n\n

      \u5927\u6982\u5728\u6587\u4ef6\u4e00\u534a\u7684\u4f4d\u7f6e\u627e\u5230\u56fe\u7247\u7684\u7ed3\u5c3e\uff0c\u540c\u65f6\u53d1\u73b0 EOI \u4e4b\u540e\u7d27\u63a5\u7740\u7684 0x50 4B 03 04<\/code> \u662f ZIP \u7684\u6587\u4ef6\u7684\u8d77\u59cb\u6807\u5fd7\u3002\u4e0d\u96be\u5224\u65ad\u51fa\uff0c\u4ece\u6b64\u5904\u5f00\u59cb\u4e00\u76f4\u5230\u6587\u4ef6\u7ed3\u5c3e\u7684\u90e8\u5206\u662f\u4e2a\u9644\u52a0\u7684 ZIP \u538b\u7f29\u6587\u4ef6\u3002<\/p>\n\n\n\n

      \u56e0\u6b64\uff0c\u5c06 ZIP \u6587\u4ef6\u7684\u6570\u636e\u90e8\u5206\u62f7\u8d1d\u51fa\u6765\uff0c\u5e76\u7c98\u8d34\u81f3\u7528\u4e8c\u8fdb\u5236\u7f16\u8f91\u5668\u65b0\u5efa\u7684\u6587\u4ef6\u4e2d\uff0c\u547d\u540d\u4e3a d.zip \uff08\u6587\u4ef6\u540d\u53ef\u968f\u610f\uff09\u5e76\u4fdd\u5b58\uff0c\u5f97\u5230\u538b\u7f29\u5305\u3002\u5c06\u5176\u4ee5 ZIP \u65b9\u5f0f\u89e3\u538b\u53ef\u5f97\u6587\u4ef6\u5939 d\uff0c\u5185\u6709\u4e24\u6587\u4ef6\uff1aa.zip \u548c secret.bmp\u3002\u5176\u4e2d\uff0ca.zip \u89e3\u538b\u9700\u8981\u5bc6\u7801\uff0c\u800c secret.bmp \u5728\u5c1d\u8bd5\u6253\u5f00\u65f6\u4f1a\u63d0\u793a\u201c\u6587\u4ef6\u5df2\u635f\u574f\u201d\u3002\u518d\u6b21\u4f7f\u7528\u4e8c\u8fdb\u5236\u7f16\u8f91\u5668\u6253\u5f00 secret.bmp\uff0c\u7136\u800c\u53d1\u73b0\u6587\u4ef6\u5185\u5bb9\u662f\u6587\u672c\u6587\u4ef6\uff0c\u5e76\u975e BMP \u6587\u4ef6\uff1a<\/p>\n\n\n\n

      <\/div>
      <\/div><\/div><\/div>\"http:\/\/45.76.150.185\/wp-content\/uploads\/2019\/04\/secret.bmp-1024x133.png\"<\/figure><\/figure><\/div>\n\n\n\n

      \u89c2\u5bdf\u6587\u672c\uff0c\u53ef\u53d1\u73b0 base64 \u5b57\u7b26\u4e32 dGhlIHBhc3N3b3JkIGlzOiBoMzExMF90aDNyMyE==<\/code>\uff0c\u89e3\u7801\uff0c\u5f97\u5230\uff1athe password is: h3110_th3r3!<\/code> \u56e0\u6b64\uff0c\u4f7f\u7528 h3110_th3r3<\/code> \u89e3\u538b a.zip\uff0c\u5f97\u5230\u56fe\u7247 a.png\uff1a<\/p>\n\n\n\n

      <\/div>
      <\/div><\/div><\/div>\"https:\/\/www.eolstudy.com\/wp-content\/uploads\/2019\/03\/a.png\"<\/figure><\/figure><\/div>\n\n\n\n

      \u6700\u8ba9\u4eba\u65e0\u8bed\u7684\u5730\u65b9\u8981\u6765\u4e86\u2014\u2014<\/p>\n\n\n\n

      \u56fe\u7247\u4e4d\u4e00\u770b\u5c31\u662f\u51e0\u4e2a\u51e0\u4f55\u56fe\u5f62\uff0c\u5bb9\u6613\u8ba9\u4eba\u4e60\u60ef\u6027\u5730\u4ee5\u4e3a\u4ecd\u9700\u8981\u7528\u4e8c\u8fdb\u5236\u7f16\u8f91\u5668\u67e5\u770b\u9690\u5199\u5185\u5bb9\uff1b\u7136\u800c\uff0c\u5728\u957f\u65f6\u95f4\u67e5\u770b\u56fe\u7247\u4e8c\u8fdb\u5236\u4fe1\u606f\u65e0\u679c\u540e\uff0c\u6211\u53c8\u65e0\u804a\u5730\u91cd\u65b0\u770b\u8d77\u4e86\u539f\u56fe\uff0c\u8fd9\u624d\u53d1\u73b0\u5728\u9ed1\u8272\u77e9\u5f62\u4e0b\u65b9\u9690\u9690\u7ea6\u7ea6\u6709\u4e9b\u5b57\u8ff9\uff0c\u751a\u81f3\u80fd\u770b\u5230 pctf{….} \u7684\u6837\u5f0f\uff01\u663e\u7136\u8fd9\u662f Flag \u65e0\u7591\u4e86\uff1a<\/p>\n\n\n\n

      <\/div>
      <\/div><\/div><\/div>\"http:\/\/45.76.150.185\/wp-content\/uploads\/2019\/04\/faint-flag-1024x470.png\"<\/figure><\/figure><\/div>\n\n\n\n

      \u7136\u800c\uff0c\u8bd5\u56fe\u4e00\u70b9\u4e00\u70b9\u5c1d\u8bd5\u770b\u6e05\u6bcf\u4e2a\u5b57\u7b26\u7684\u6211\u7ec8\u4e8e\u7cbe\u75b2\u529b\u7aed\u5374\u8fd8\u6ca1\u6709\u8ba4\u5168\u3002\u65e0\u5948\u4e4b\u4e0b\u60f3\u5230\u4e86\u7528 PS \u63d0\u9ad8\u5bf9\u6bd4\u5ea6\uff0c\u8fd9\u624d\u7ec8\u4e8e\u8ba9 Flag \u73b0\u51fa\u539f\u5f62\uff1a<\/p>\n\n\n\n

      <\/div>
      <\/div><\/div><\/div>\"https:\/\/www.eolstudy.com\/wp-content\/uploads\/2019\/03\/flag.png\"<\/figure><\/figure><\/div>\n\n\n\n

      \u63d0\u4ea4 Flag\uff0c50 pts \u5230\u624b\uff08\u4e3a\u4ec0\u4e48\u53ea\u670950…<\/p>\n\n\n\n

      \u611f\u60f3<\/h4>\n\n\n\n

      \u964d\u4f4e\u5bf9\u6bd4\u5ea6\u7684\u9690\u5199\u53ef\u662f\u771f\u00b7\u793e\u5de5\u9690\u5199\ud83c\udf1a\uff08\u6ca1\u9519\u6240\u4ee5\u6211\u7ed9\u8fd9\u7bc7\u52a0\u4e0a\u4e86\u793e\u4f1a\u5de5\u7a0b\u5b66\u7684\u6807\u7b7e\u3002\u3002\u3002<\/p>\n","protected":false},"excerpt":{"rendered":"

      \u672c\u9898\u6e90\u81ea Pragyan CTF 2019\uff0c\u6bd4\u8d5b\u7ed3\u675f\u65f6\u5206\u503c 50 pts\u3002 \u5c31\u4ee5\u8fd9\u4e2a\u6781\u5176\u5165\u95e8\u7684\u7b80\u5355\u9898\u5f00\u59cb\u6211\u7684\u9690\u5199\u9898 Write-up \u5427\uff08\u6bd5\u7adf\u7a0d\u96be\u4e00\u70b9\u5c31\u4e0d\u4f1a\u4e86 \u9996\u5148\uff0c\u539f\u6587\u4ef6\u5728\u6b64\uff1a \u9690\u5199\u9898\u5957\u8def\uff0c\u5148\u7528\u5341\u516d\u8fdb\u5236\u67e5\u770b\u5668\u6253\u5f00\uff08\u672c\u6587\u91c7\u7528\u5de5\u5177\u4e3a Hex Fiend\uff09\u3002 \u68c0\u67e5 SOI \u4e3a 0xFF D8\uff0c\u65e0\u5f02\u5e38\uff1b\u7136\u800c\u6587\u4ef6\u7ed3\u5c3e\u5374\u5e76\u672a\u53d1\u73b0\u6b63\u786e\u7684 EOI\uff08EOI \u4e0d\u662f Eol!!!\uff09\uff1a \u4e0e\u6b64\u540c\u65f6\uff0c\u6ce8\u610f\u5230\u6587\u672c\u663e\u793a\u533a\u6709 d.zip \u5b57\u6837\uff0c\u63a8\u6d4b\u56fe\u7247\u4e2d\u63ba\u5165\u4e86\u4e00\u4e2a zip \u538b\u7f29\u6587\u4ef6\u3002 \u6ce8\u610f\u5230\u56fe\u7247\u5e76\u672a\u635f\u574f\uff0c\u56e0\u6b64\u56fe\u7247\u7684 JEPG \u90e8\u5206\u5e94\u5df2\u7b26\u5408\u6807\u51c6\uff0c\u6545\u67e5\u627e EOI\uff1a \u5927\u6982\u5728\u6587\u4ef6\u4e00\u534a\u7684\u4f4d\u7f6e\u627e\u5230\u56fe\u7247\u7684\u7ed3\u5c3e\uff0c\u540c\u65f6\u53d1\u73b0 EOI \u4e4b\u540e\u7d27\u63a5\u7740\u7684 0x50 4B 03 04 \u662f ZIP \u7684\u6587\u4ef6\u7684\u8d77\u59cb\u6807\u5fd7\u3002\u4e0d\u96be\u5224\u65ad\u51fa\uff0c\u4ece\u6b64\u5904\u5f00\u59cb\u4e00\u76f4\u5230\u6587\u4ef6\u7ed3\u5c3e\u7684\u90e8\u5206\u662f\u4e2a\u9644\u52a0\u7684 ZIP \u538b\u7f29\u6587\u4ef6\u3002 \u56e0\u6b64\uff0c\u5c06 ZIP \u6587\u4ef6\u7684\u6570\u636e\u90e8\u5206\u62f7\u8d1d\u51fa\u6765\uff0c\u5e76\u7c98\u8d34\u81f3\u7528\u4e8c\u8fdb\u5236\u7f16\u8f91\u5668\u65b0\u5efa\u7684\u6587\u4ef6\u4e2d\uff0c\u547d\u540d\u4e3a d.zip \uff08\u6587\u4ef6\u540d\u53ef\u968f\u610f\uff09\u5e76\u4fdd\u5b58\uff0c\u5f97\u5230\u538b\u7f29\u5305\u3002\u5c06\u5176\u4ee5 ZIP \u65b9\u5f0f\u89e3\u538b\u53ef\u5f97\u6587\u4ef6\u5939 d\uff0c\u5185\u6709\u4e24\u6587\u4ef6\uff1aa.zip \u548c secret.bmp\u3002\u5176\u4e2d\uff0ca.zip \u89e3\u538b\u9700\u8981\u5bc6\u7801\uff0c\u800c secret.bmp \u5728\u5c1d\u8bd5\u6253\u5f00\u65f6\u4f1a\u63d0\u793a\u201c\u6587\u4ef6\u5df2\u635f\u574f\u201d\u3002\u518d\u6b21\u4f7f\u7528\u4e8c\u8fdb\u5236\u7f16\u8f91\u5668\u6253\u5f00 […]<\/p>\n","protected":false},"author":2,"featured_media":79,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"jetpack_post_was_ever_published":false,"_jetpack_newsletter_access":"","_jetpack_dont_email_post_to_subs":false,"_jetpack_newsletter_tier_id":0,"_jetpack_memberships_contains_paywalled_content":false,"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false},"version":2}},"categories":[3],"tags":[5,6,7,8],"class_list":["post-74","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-write-ups","tag-5","tag-6","tag-pragyan-ctf-2019","tag-8"],"jetpack_publicize_connections":[],"jetpack_featured_media_url":"https:\/\/www.eolstudy.com\/wp-content\/uploads\/2019\/03\/welcome.jpeg","jetpack_sharing_enabled":true,"jetpack_likes_enabled":true,"_links":{"self":[{"href":"https:\/\/www.eolstudy.com\/index.php\/wp-json\/wp\/v2\/posts\/74"}],"collection":[{"href":"https:\/\/www.eolstudy.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.eolstudy.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.eolstudy.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.eolstudy.com\/index.php\/wp-json\/wp\/v2\/comments?post=74"}],"version-history":[{"count":32,"href":"https:\/\/www.eolstudy.com\/index.php\/wp-json\/wp\/v2\/posts\/74\/revisions"}],"predecessor-version":[{"id":212,"href":"https:\/\/www.eolstudy.com\/index.php\/wp-json\/wp\/v2\/posts\/74\/revisions\/212"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.eolstudy.com\/index.php\/wp-json\/wp\/v2\/media\/79"}],"wp:attachment":[{"href":"https:\/\/www.eolstudy.com\/index.php\/wp-json\/wp\/v2\/media?parent=74"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.eolstudy.com\/index.php\/wp-json\/wp\/v2\/categories?post=74"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.eolstudy.com\/index.php\/wp-json\/wp\/v2\/tags?post=74"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}